# PYTHON CACHE POISONING

This artifact contains tools and proofs of concept for Python cache poisoning through [PEP-3147](https://peps.python.org/pep-3147/).

## GENERAL WORKFLOW

While the components work independently, they generally follow the following workflow:

0. proof-of-concepts: Determine whether a package manager is vulnerable
1. pyc-finder: Find Python caches in artifacts
2. cache-reproduction-tests: Try to reproduce these cache files
3. bytecode-analyzer: Investigate why the reproduction differs from the original

For further documentation, we refer to the `README.md`s in the respective subdirectories.