Replication Code for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem" (doi:10.60507/FK2/TNJHGT)

View:

Part 1: Document Description
Part 2: Study Description
Part 5: Other Study-Related Materials
Entire Codebook

Replication Code for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"

doi:10.60507/FK2/TNJHGT

bonndata

2026-01-30

1

Ohm, Marc; Pohl, Timo; Swierzy, Ben; Meier, Michael, 2026, "Replication Code for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"", https://doi.org/10.60507/FK2/TNJHGT, bonndata, V1

Replication Code for: "From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem"

doi:10.60507/FK2/TNJHGT

Ohm, Marc (University of Bonn & Fraunhofer FKIE)

Pohl, Timo (University of Bonn)

Swierzy, Ben (Fraunhofer FKIE & University of Bonn)

Meier, Michael (University of Bonn & Fraunhofer FKIE)

2025-10-24

bonndata

Ohm, Marc

Ohm, Marc-Philipp

2026-01-19

https://doi.org/10.60507/FK2/TNJHGT

Computer and Information Science, Computer and Information Science

Scripts for reproducing cache files in Python packages. This includes an automated Docker-based setup for running old Python versions with bytecode compilation and tools for automatic and manual cache file comparisons. Additionally, proofs of concept are included

<a href="https://mit-license.org/">MIT</a>

List of analyzed Python Packages: https://doi.org/10.60507/FK2/EADABS

Ohm, M., Pohl, T., Swierzy, B., & Meier, M. (2026). From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem. In SICHERHEIT 2026. Gesellschaft für Informatik, Bonn.

10.18420/sicherheit2026_13

Ohm, M., Pohl, T., Swierzy, B., & Meier, M. (2026). From Constrictor to Serpent: Investigating the Threat of Cache Poisoning in the Python Ecosystem. In SICHERHEIT 2026. Gesellschaft für Informatik, Bonn.

Label:

pyproject.toml

application/toml

Label:

readme.txt

text/plain

Label:

USAGE.md

Text:

text/markdown

Label:

analyzer.py

Text:

text/x-python

Label:

python_37_314.py

Text:

text/x-python

Label:

README.md

text/markdown

Label:

rich_313_parser.py

Text:

text/x-python

Label:

gator-core-__init__-3.11.13.pyc

Text:

application/octet-stream

Label:

gator-core-__init__.cpython-311.pyc

Text:

application/octet-stream

Label:

table-synthesis-GenerateTable-3.10.18.pyc

Text:

application/octet-stream

Label:

table-synthesis-GenerateTable.cpython-310.pyc

Text:

application/octet-stream

Label:

1-cleanup-data.py

Text:

text/x-python

Label:

2-recreate-cache.py

Text:

text/x-python

Label:

3-analyze-results.py

Text:

text/x-python

Label:

models.py

Text:

text/x-python

Label:

README.md

Text:

text/markdown

Label:

README.md

Text:

text/markdown

Label:

Cargo.lock

Text:

application/octet-stream

Label:

Cargo.toml

Text:

application/octet-stream

Label:

config.toml

Text:

application/octet-stream

Label:

main.rs

Text:

application/rls-services+xml

Label:

python_26_31.py

Text:

text/x-python

Label:

python_32_36.py

Text:

text/x-python

Label:

python_37_314.py

Text:

text/x-python

Label:

README.md

Text:

text/markdown

Label:

__init__.py

Text:

text/x-python

Label:

python_26_36.py

Text:

text/x-python

Label:

python_37_314.py

Text:

text/x-python

Label:

README.md

Text:

text/markdown

Label:

rich_313_parser.py

Text:

text/x-python

Label:

__init__.py

Text:

text/x-python

Label:

extract-magic-table.py

Text:

text/x-python

Label:

extract-release-table.py

Text:

text/x-python

Label:

magic-table

Text:

text/plain; charset=US-ASCII

Label:

README.md

Text:

text/markdown

Label:

compile_and_poison.py

Text:

text/x-python

Label:

malicious.py

Text:

text/x-python

Label:

prepare.sh

application/x-shellscript

Label:

README.md

text/markdown

Label:

main.py

Text:

text/x-python

Label:

pyproject.toml

application/toml

Label:

MANIFEST.in

Text:

text/plain

Label:

pyproject.toml

application/toml

Label:

README.md

text/markdown

Label:

benign.py

Text:

text/x-python

Label:

main.py

Text:

text/x-python

Label:

__init__.py

Text:

text/x-python

Label:

evaluate.py

Text:

text/x-python

Label:

pyproject.toml

application/toml

Label:

README.md

Text:

text/markdown

Label:

scan_packages_for_cache_files.py

Text:

text/x-python

Label:

uv.lock

application/octet-stream