The repository has collected over 10,000 malicious pypi packages. This dataset is the work of the ASE 2023 paper "An Empirical Study of Malicious Code In PyPI Ecosystem". Of course, we will continue to expand the dataset. Latest update time: 3 Sept. 2026
☆136Sep 3, 2026Updated last month
Alternatives and similar repositories for pypi_malregistry
Users that are interested in pypi_malregistry are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An open-source dataset of malicious software packages found in the wild.☆390Updated this week
- ☆10Dec 11, 2024Updated last year
- A fork of Bandit tool with patterns to identifying malicious python code.☆31Sep 1, 2022Updated 4 years ago
- Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages☆141Oct 5, 2022Updated 4 years ago
- The Artifacts for ICSE 2023 paper: Bad Snakes: Understanding and Improving Python Package Index Malware Scanning☆13Feb 8, 2026Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repository complements our paper by offering the training dataset, the best-performing models utilized in our real-world experiment,…☆22Mar 7, 2025Updated last year
- Artifact accompanying our ICSE '22 paper "Practical Automated Detection of Malicious npm Packages"☆47Jan 25, 2022Updated 4 years ago
- A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…☆639Updated this week
- This repository contains a list of papers about software supply chain☆29May 22, 2024Updated 2 years ago
- Collection of tools for analyzing open source packages.☆373Updated this week
- Automatically scan new pypi packages for potentially malicious code☆31Mar 24, 2024Updated 2 years ago
- Open Source Package Analysis☆921Oct 21, 2026Updated last week
- A dataset of software supply chain compromises. Please help us maintain it!☆130Sep 16, 2022Updated 4 years ago
- ☆32May 1, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Modular static malicious JavaScript detection system☆76Jan 18, 2021Updated 5 years ago
- Resources for our ICSE'24 poster: Prompt-Enhanced Software Vulnerability Detection Using ChatGPT.☆24May 8, 2024Updated 2 years ago
- YASA-UAST is an intermediate representation structure for multi-language program analysis. The UAST-Parser parses code from different pro…☆96Sep 16, 2026Updated last month
- Automated Exploit Generation for Node.js Packages☆21Aug 19, 2026Updated 2 months ago
- Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …☆210Updated this week
- YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, d…☆328Oct 8, 2026Updated 3 weeks ago
- Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis.☆21Apr 11, 2023Updated 3 years ago
- Source Code Vulnerability Detection Tools（SCVDT）provides a vulnerable code database, vulnerability detection service for Java and C/C++ p…☆115Jun 21, 2021Updated 5 years ago
- TensorFlow API analysis tool and malicious model detection tool☆43May 27, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- 这个脚本主要提供对pypi供应链的源头进行安全扫描研究，扫描并发现未知的恶意包情况。☆28May 22, 2023Updated 3 years ago
- ☆15Sep 27, 2025Updated last year
- Insomnihack2024☆13Apr 26, 2024Updated 2 years ago
- archives for Tongji CTF 2017☆10Oct 25, 2023Updated 3 years ago
- A pure TypeScript/JavaScript decompiler for Java bytecode. Runs in browsers and Node.js — no JVM, WebAssembly, or runtime dependencies.☆22Updated this week
- Scalpel: The Python Static Analysis Framework☆334Mar 28, 2024Updated 2 years ago
- ODGen is a JavaScript Static Analysis tool to detect multiple types of vulnerabilities in Node.js packages.☆170Jan 29, 2024Updated 2 years ago
- Code and dataset for paper C4: Contrastive Cross-Language Code Clone Detection☆30May 24, 2022Updated 4 years ago
- Platform for automatic analysis of malicious applications using artificial intelligence algorithms ⚖️☆14Aug 8, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Official PyTorch implementation of AAAI 2026 paper Geoshield☆14Apr 15, 2026Updated 6 months ago
- Chain of Attack: a Semantic-Driven Contextual Multi-Turn attacker for LLM☆40Jan 17, 2025Updated last year
- MDG-based static vulnerability scanner specialized in analyzing npm packages and detecting taint-style and prototype pollution vulnerabil…☆27Dec 10, 2025Updated 10 months ago
- ☆13Jan 22, 2024Updated 2 years ago
- Static JavaScript Analysis: AST, Control Flow, Data Flow, & Pointer Analysis☆28Feb 26, 2022Updated 4 years ago
- ☆26Apr 1, 2026Updated 6 months ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆151Feb 24, 2025Updated last year