News for hackers. Stuff that matters.

A comment on Dozens of malicious PyPI packages discovered targeting developers. Parent comment

Re:Dozens of malicious PyPI packages discovered targeting de... by coredog64 on Wednesday November 02, 2022 @06:40PM (#33443868)
As of Python 3, pip install into the system Python lib directory is strongly discouraged. ISTR that even using pip to update pip results in a warning.

That’s not to say that there’s not still some libs out there that haven’t updated docs to get with the times.

[ Parent | on HN ]
Re:Dozens of malicious PyPI packages discovered targeting de... by kevin_thibedeau on Thursday November 03, 2022 @04:30AM (#33448403)
More distros should adopt the Debian practice of installing into dist-packages and leaving site-packages as a /usr/local equivalent for pip to use on it's own.
[ Parent | on HN ]