Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Should malware/spam/etc which gets removed from pypi generate advisories here?

Open
  • Is something wrong?
#45 27 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
20/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Stale
Tech stack
python
Domain
security

Research direction

Start by reading the linked discussion in pypa/warehouse#4703, including comment 985270450, and review the 27-comment thread here. The issue names no files, tests, or entry points. Work is not ready until there is a decision and a defined scope for generating advisories from PyPI removals classified as malware or spam.

Written by the indexing model from the issue text.

Description

Following from some discussion in https://github.com/pypa/warehouse/issues/4703, do we think that packages removed from PyPI due to being classified as malware, etc should cause advisories to be generated here?

Dominant language
Shell
Stars
373
Forks
113
Avg merge
1d 44m
Merged PRs (30d)
8

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from pypa/advisory-database

All issues in pypa/advisory-database

Similar issues

More Shell/Bash issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.