From ffe7f8de1f03c887c8697e86bad31b37d684b1bf Mon Sep 17 00:00:00 2001 From: Chris Ingram Date: Thu, 14 May 2026 16:28:50 +0100 Subject: [PATCH] Use numpy==2.4.4 as test malware in pdm e2e tests The safe-chain-pi-test package no longer exists on PyPI. Aikido now patches numpy==2.4.4 into the malware list for tests, matching the pattern already used in the poetry e2e suite. --- test/e2e/pdm.e2e.spec.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/test/e2e/pdm.e2e.spec.js b/test/e2e/pdm.e2e.spec.js index 96379fb..f9d1ee6 100644 --- a/test/e2e/pdm.e2e.spec.js +++ b/test/e2e/pdm.e2e.spec.js @@ -70,7 +70,7 @@ describe("E2E: pdm coverage", () => { await shell.runCommand("cd /tmp/test-pdm-malware && pdm init --non-interactive"); const result = await shell.runCommand( - "cd /tmp/test-pdm-malware && pdm add safe-chain-pi-test" + "cd /tmp/test-pdm-malware && pdm add numpy==2.4.4" ); assert.ok( @@ -231,7 +231,7 @@ describe("E2E: pdm coverage", () => { // Add malware package - this will create lock file and attempt download const result = await shell.runCommand( - "cd /tmp/test-pdm-install-malware && pdm add safe-chain-pi-test 2>&1" + "cd /tmp/test-pdm-install-malware && pdm add numpy==2.4.4 2>&1" ); assert.ok( @@ -252,7 +252,7 @@ describe("E2E: pdm coverage", () => { // Try to add malware alongside safe package const result = await shell.runCommand( - "cd /tmp/test-pdm-batch && pdm add safe-chain-pi-test requests 2>&1" + "cd /tmp/test-pdm-batch && pdm add numpy==2.4.4 requests 2>&1" ); assert.ok(