semvec/pypi-packages huggingface dataset:
whatalovelyday 1.0.5
This package demonstrates what a malicious PyPI package could do to you :-)


Malicious package proof of concept

This package demonstrates what a malicious PyPI package could do to you :-)

What it does: It downloads a python file from a github gist and runs it. That
python file creates a file in your `/tmp`. Nothing really malicious, but you 
get the point.

I created it mainly to test methods of installing python packages without the
danger of running their `setup.py`. At the moment there seem to be none. Poetry
manages to at least determine the dependencies of packages without running
their `setup.py` files, but also uses pip internally when installing. 

As a workaround, you can forbid the usage of source distribution packages by
using the `--only-binary :all:` flag on your pip commands. Unfortunately, some
packages do not have a binary distribution and you will be unable to install
them with this flag.

Here are some more resources to read about the problem:

* mschwager's 0wned package: https://github.com/mschwager/0wned
* Jordan Wright caught my package: https://prog.world/check-thousands-of-pypi-packages-for-malware/
ocrBill-hieukien 0.0.1
SmartDoc package - OCR and Extract Informations Vietnamese Documents
Requires Python: >=3.6

SmartDoc - OCR and Extract Informations Vietnanese Documents

1. OCR&EI VBHC - Số hoá và Rút trích thông tin Văn bản hành chính
2. OCR&EI CMND - Số hoá và Rút trích thông tin Chứng minh Nhân dân
3. OCR&EI Hoá đơn - Số hoá và Rút trích thông tin Hoá đơn