Python Package Index

lastmod 2026-09-29created 2015-01-2911 edits

The Python Package Index or PyPI is the official third-party software repository for the Python programming language. Python developers intend it to be a comprehensive catalog of all open source Python packages.

While the PyPI website is maintained by the Python Software Foundation, its contents are uploaded by individual package maintainers. Python package managers such as pip default to downloading packages from PyPI.

Categories

• PyPI:Classifiers
• proxpi - PyPI caching proxy

Blacklist

• JFrog Detects Malicious PyPI Packages Stealing Credit Cards and Injecting Code - The JFrog security research team found several malicious packages and reported them to PyPI, which removed them

List of malicious packages

How to use API tokens

• Help · PyPI # How can I use API tokens to authenticate with PyPI?
• How to upload your package to the Python Package Index (PyPI) test server · Not sorry for the inconvenience

To use an API token:

• Set your username to __token__
• Set your password to the token value, including the pypi- prefix

For local use, add the following to the $HOME/.pypirc file:

[pypi]
  username = __token__
  password = pypi-AgE....w

See also

• Python
• pip
• Setuptools (setup.py)

Favorite site

• Wikipedia (en) description of PyPI
• Making a Flask Extension & building and distributing a Python Package (PyPI)
• Registering a Python Package – pypi