# Known-malicious Python package names (as reported by the sources below)
# Part of Ardvane (MIT). One package name per line; lines starting with # are comments.
# Last updated: 2026-10-10
# Sources (credit to the researchers and maintainers who found these):
#   - polinrider-cleaner ioc/bad-packages.txt (MIT) — https://github.com/meSingh/polinrider-cleaner
#   - Bedri-B/polinrider (MIT) — https://github.com/Bedri-B/polinrider
#   - OpenSourceMalware PolinRider dossier — https://github.com/OpenSourceMalware/PolinRider
#   - OpenSourceMalware, "PolinRider Jumps the Fence to Go, Packagist, npm, PyPI" — https://opensourcemalware.com/blog/polinrider-jumps-the-fence
# If you find one of these in your project: do NOT run it. See ../../docs/after-a-scan/if-danger-found.md
pybitjs
pyservercheck
