Skip to main content

evilpackages

Detect possible malicious pypi packages

Installation

From the project root directory:

$ python setup.py install

Usage

Simply run it:

$ evilpackages

Use –help/-h to view info on the arguments:

$ evilpackages --help

Release Notes

0.0.1:

Project created

Metadata

Release files for evilpackages 0.0.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for evilpackages 0.0.1
File Size Uploaded Provenance Actions
evilpackages-0.0.1.tar.gz 3.9 kB Without provenance Details for evilpackages-0.0.1.tar.gz

Release files / evilpackages-0.0.1.tar.gz

Download URL evilpackages-0.0.1.tar.gz
Size 3.9 kB
Tags Source
SHA-256 checksum
How to use checksums
8df54e7ef09538d86143fb69c047106db5427de5c5c9ad0d8638a18338633728
BLAKE2b-256 checksum
How to use checksums
f8bcaa925e21f98f86ae70f3eea974123c635d1cbd2305324e6f9e64afe68f5b
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/3.1.1 pkginfo/1.5.0.1 requests/2.22.0 setuptools/42.0.2 requests-toolbelt/0.9.1 tqdm/4.40.0 CPython/3.7.3

Security for evilpackages 0.0.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.0.1 This release

1 release file No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page