This repository is an open-source dataset of 13208 malicious software packages (and counting) identified by Datadog, as part of our security research efforts in software supply-chain security. Most of the malicious packages have been identified by GuardDog.

Current ecosystems:

• npm
• PyPI

Malicious samples are available under the samples/ folder and compressed as an encrypted ZIP file with the password infected. The date indicated as part of the file name is the discovery date, not necessarily the package publication date.

You can use the script extract.sh to automatically extract selected samples in order to perform local analysis on them. Alternatively, you can extract a single sample using:

$ unzip -o -P infected samples/pypi/malicious_intent/pydefender/1.0.0/2023-03-20-pydefender-v1.0.0.zip -d /tmp/
Archive:  samples/pypi/malicious_intent/pydefender/1.0.0/2023-03-20-pydefender-v1.0.0.zip
   creating: /tmp/2023-03-20-pydefender-v1.0.0/

Samples are separated by both ecosystem and according to whether they are 1) compromised versions of benign packages or 2) packages published with malicious intent, those whose primary purpose is to deliver malware.

Each ecosystem subdirectory has a manifest.json file that names which packages are included in the dataset. These files are useful for quickly testing whether a given version of a package can be considered malicious:

• If a package is not in the manifest, the test is inconclusive
• Otherwise:
  • If the manifest entry is null, the package has malicious intent: all versions can be considered malicious
  • Otherwise, the package previously suffered a compromise, and the manifest contains a list of affected versions

This dataset is released under the Apache-2.0 license. You're welcome to use it with attribution.

You can cite it using:

@misc{OpenSourceDatasetMaliciousSoftwarePackages, 
    month     = Mar,
    day       = 20,
    date      = 2023,
    journal   = {Open-Source Dataset of Malicious Software Packages},
    publisher = {Datadog Security Labs},
    url       = https://github.com/datadog/malicious-software-packages-dataset, 
}

Malicious software packages provided as part of this repository may contain legitimate, licensed code. In that case, the applicable license is the one of the original package, indicated in the metadata of its setup.py file.

• This repository contains actively malicious software that was published by threat actors. Do not run it on your machine.

• This dataset may suffer from selection bias, as it was mostly identified by a single ruleset (GuardDog). As such, it may not accurately represent the landscape of software supply-chain security malware.

We will be regularly adding new packages to the dataset.

Every single software package included in this dataset has been manually triaged by a human.

At the time, we did not make available the clustering algorithm we use internally to group similar samples and ease analysis. If you have interest, please reach out at [email protected] - we'll be happy to talk!

At the time, the repository is not accepting contributions. However, if you'd like to share an interesting finding with us, reach out at [email protected]!

https://github.com/lxyeternal/pypi_malregistry and related paper https://lcwj3.github.io/img_cs/pdf/An%20Empirical%20Study%20of%20Malicious%20Code%20In%20PyPI%20Ecosystem.pdf https://github.com/cybertier/Backstabbers-Knife-Collection