PyPI API Token

Detects PyPI (Python Package Index) upload tokens. The fixed marker pypi-AgEIcHlwaS5vcmc is the base64 encoding of "pypi.org", making these tokens near-unmistakable. A leaked token lets an attacker publish malicious package releases.

Type

regex

Engine

universal

Confidence

high

Confidence justification

High confidence: the static pypi-AgEIcHlwaS5vcmc marker decodes to "pypi.org" and does not occur outside genuine PyPI tokens, giving near-zero false positives.

Jurisdictions

global

Regulations

Criminal Code Act 1995 (Cth)

Frameworks

CIS Controls, ISO 27001, NIST CSF, SOC 2

Data categories

credentials, security

Scope

narrow

Risk rating

8

Platform compatibility

Purview: Compatible, GCP DLP: Compatible, Macie: Compatible, Zscaler: Compatible, Palo Alto: Compatible, Netskope: Compatible

Pattern

pypi-AgEIcHlwaS5vcmc[A-Za-z0-9_-]{50,1000}

Corroborative evidence keywords

pypi, pypi.org, twine, upload token, api token, PYPI_TOKEN, __token__

Proximity: 300 characters

Should match

• pypi-AgEIcHlwaS5vcmcABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 — Exact 65 probe - macaroon marker and body without independent publish context
• twine upload credential pypi-AgEIcHlwaS5vcmcaB3dE6gH9jK2mN5pQ8sT1uV4wX7yZ0aB3dE6gH9jK2mN5pQ8sT1uV4wX7yZ0aB3dE — Exact 75 probe - token with Twine upload context
• PyPI.org package publish secret PYPI_TOKEN=pypi-AgEIcHlwaS5vcmczZyYxXwWvVuUtTsSrRqQpPoOnNmMlLkKjJiIhHgGfFeEdDcCbBaA0123456789_- — Exact 85 probe - PyPI publish context plus canonical token assignment

Should not match

• pypi-AgEIcHlwaS5vcmcTOOSHORT — Body too short to be a valid PyPI token
• pypi-AgEIbm90cGtlcQABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 — Wrong macaroon marker (does not decode to pypi.org)
• NPM_TOKEN=pypi-AgEIcHlwaS5vcmcABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 — Sibling package-registry label does not corroborate a PyPI token
• Documentation example: PyPI.org package PYPI_TOKEN=pypi-AgEIcHlwaS5vcmcABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789 — Documentation example containing a valid-shaped token is excluded
• set your pypi upload token with twine before publishing to pypi.org — Prose mention without a token value

Known false positives

• Documentation showing the literal pypi-AgEIcHlwaS5vcmc marker without a real body. Mitigation: Require a sufficiently long base64 body and check for placeholder markers (example, xxxx).

References

• PyPI help - API tokens

Collections

• Cloud Credentials & API Keys