bonndata catalog
Thumbnail for Replication Data for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"

Replication Data for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"

Open this dataset in the live repository

Important usage condition: Use and redistribution are governed by CC BY 4.0. Review and comply with the license before using the data.
Persistent identifier
doi:10.60507/FK2/EADABS
Published version
1.0
Publication date
2026-01-30
License
CC BY 4.0

Description

The dataset contains Package-URLs (PURLs) and SHA-256 checksums of Python packages from PyPI which contain at least one cache file (*.pyc).

Creators

Keywords

Python, PyPI, Cache, Software Supply Chain

Files

Before downloading: Use and redistribution are governed by CC BY 4.0. Review and comply with the license before using the data.
FileTypeBytesChecksum
analyzed_artifacts.csvtext/csv1766682MD5 10c911b0e736652dba4281adbe6b8b89
readme.txttext/plain3519MD5 1bfb8f26d184f4172dc24ab957596fe8

Citation

Ohm, Marc; Pohl, Timo; Swierzy, Ben; Meier, Michael, 2026-01-30, Replication Data for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem", doi:10.60507/FK2/EADABS, V1.0

Additional Dataverse fields

Id566
Dataset Typedataset
Internal Version Number20
Latest Version Publishing StateRELEASED
Production Date2025-08-09
Release Time2026-01-30T12:26:21Z
Create Time2026-01-19T10:48:19Z
Citation Date2026-01-30
File Access RequestTrue

Export metadata

Static metadata exports available for this published dataset version:

Complete Dataverse metadata

Citation Metadata

Title title
Replication Data for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"
Author author
  1. Author Name
    Ohm, Marc
    Author Affiliation
    University of Bonn & Fraunhofer FKIE
    Author Identifier Scheme
    ORCID
    Author Identifier
    Type Name
    authorIdentifier
    Multiple
    False
    Type Class
    primitive
    Value
    https://orcid.org/0000-0002-2913-5270
    Expandedvalue
    Person Name
    Ohm, Marc
    @id
    https://orcid.org/0000-0002-2913-5270
    Scheme
    ORCID
    @type
    https://schema.org/Person
  2. Author Name
    Pohl, Timo
    Author Affiliation
    University of Bonn
    Author Identifier Scheme
    ORCID
    Author Identifier
    Type Name
    authorIdentifier
    Multiple
    False
    Type Class
    primitive
    Value
    https://orcid.org/0009-0002-3760-7976
    Expandedvalue
    Person Name
    Pohl, Timo
    @id
    https://orcid.org/0009-0002-3760-7976
    Scheme
    ORCID
    @type
    https://schema.org/Person
  3. Author Name
    Swierzy, Ben
    Author Affiliation
    Fraunhofer FKIE & University of Bonn
    Author Identifier Scheme
    ORCID
    Author Identifier
    Type Name
    authorIdentifier
    Multiple
    False
    Type Class
    primitive
    Value
    https://orcid.org/0009-0003-0485-4791
    Expandedvalue
    Person Name
    Swierzy, Ben
    @id
    https://orcid.org/0009-0003-0485-4791
    Scheme
    ORCID
    @type
    https://schema.org/Person
  4. Author Name
    Meier, Michael
    Author Affiliation
    University of Bonn & Fraunhofer FKIE
    Author Identifier Scheme
    ORCID
    Author Identifier
    Type Name
    authorIdentifier
    Multiple
    False
    Type Class
    primitive
    Value
    https://orcid.org/0009-0006-8199-5004
    Expandedvalue
    Person Name
    Meier, Michael
    @id
    https://orcid.org/0009-0006-8199-5004
    Scheme
    ORCID
    @type
    https://schema.org/Person
Dataset Contact datasetContact
  1. Dataset Contact Name
    Ohm, Marc
    Dataset Contact Affiliation
    University of Bonn
    Dataset Contact Email
    ohm@cs.uni-bonn.de
Ds Description dsDescription
  1. Ds Description Value
    The dataset contains Package-URLs (PURLs) and SHA-256 checksums of Python packages from PyPI which contain at least one cache file (*.pyc).
Subject subject
  1. Computer and Information Science
Subject Refinement subjectRefinement
  1. Subject Refinement Value
    Computer Science: Security and Dependability [409-03]
Free Keyword freeKeyword
  1. Free Keyword Value
    Python
  2. Free Keyword Value
    PyPI
  3. Free Keyword Value
    Cache
  4. Free Keyword Value
    Software Supply Chain
Publication publication
  1. Publication Relation Type
    IsSupplementTo
    Publication Citation
    Ohm, M., Pohl, T., Swierzy, B., & Meier, M. (2026). From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem. In SICHERHEIT 2026. Gesellschaft für Informatik, Bonn.
    Publication IDType
    doi
    Publication IDNumber
    10.18420/sicherheit2026_13
    Publication URL
    https://doi.org/10.18420/sicherheit2026_13
Language language
  1. English
Production Date productionDate
2025-08-09
Depositor depositor
Ohm, Marc
Date Of Deposit dateOfDeposit
2026-01-19
Date Of Collection dateOfCollection
  1. Date Of Collection Start
    2025-08-09
    Date Of Collection End
    2025-08-09
Kind Of Data kindOfData
  1. machine-readable text
Related Material relatedMaterial
  1. Analysis Software: https://doi.org/10.60507/FK2/TNJHGT
Data Sources dataSources
  1. PyPI package registry https://pypi.org/

Expected crawler behaviour

Use a stable, truthful User-Agent with product/version and a working contact URL. Across all IP addresses and HTTP connections used by one crawler identity, allow no more than 5 requests in flight and wait at least 20 seconds between request starts. Crawl URLs listed in the catalog sitemap, including file pages and download URLs when they are published, use conditional requests, honor Retry-After, and apply exponential backoff after errors.

The welcome page may link to the interactive repository for human navigation. Automated clients must not treat that human link as a catalog crawl target.

Read the live machine-readable crawler policy before and during a crawl. Stop crawling when it reports CPU or memory utilization at or above 80% and 80% respectively.