id: pypi-token info: name: PyPI Upload Token author: DhiyaneshDK severity: info reference: - https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/pypi.yml - https://github.com/pypa/warehouse/issues/6051 - https://pypi.org/project/pypitoken/ metadata: verified: true tags: file,keys,pypi,token file: - extensions: - all extractors: - type: regex part: body regex: - "(pypi-AgEIcHlwaS5vcmc[a-zA-Z0-9_-]{50,})" # digest: 4b0a004830460221008fd309bb55fdcb10af63f0e5c49e66f96b5b63598001fd085e6ad1d7db4676480221009f8481869b196778dc1aa0a750367371173d1f41449f4dcb5cb906eaaa9f377b:922c64590222798bb761d5b6d8e72950