{"adoption": {"forks": 497, "observed_at": "2026-08-28T04:04:06.512267+00:00", "stars": 1242}, "canonical_url": "https://ross.abutalabs.com/products/pinduoduo_backdoor_unpacker", "card": {"archived": false, "artifact_type": "dataset", "description": "Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo", "domain": ["security", "reverse-engineering", "android-tools"], "enriched": true, "function": ["reverse-engineering", "security", "parser"], "health_score": 20, "homepage": null, "language": "Java", "license": null, "license_family": "other", "maturity": "maintenance", "member_repos": ["davinci1012/pinduoduo_backdoor_unpacker"], "name": "davinci1012/pinduoduo_backdoor_unpacker", "platform": ["jvm"], "pushed_at": "2023-03-27T13:22:57+00:00", "repo": "davinci1012/pinduoduo_backdoor_unpacker", "stars": 1242, "tags": ["malware-analysis", "unpacker", "android-backdoor", "pinduoduo", "exploit-samples", "dex-unpacking", "android"], "topics": [], "urls": [], "use_cases": ["unpack pinduoduo .mw1 manwe packed samples", "unpack .nw0 nvwa files into java classes", "analyze pinduoduo android backdoor samples", "study dynamically delivered android malware payloads", "reverse engineer packed dex files for malware research"], "what_it_is": "A collection of malicious backdoor and exploit samples extracted from the Pinduoduo Android app, along with Java-based unpacker scripts for its manwe (.mw1) and nvwa (.nw0) packers. The unpackers dump protected DEX payloads into Java class files for analysis in tools like jadx.", "when_to_avoid": ["you need a maintained general-purpose Android unpacker", "you require a licensed, production-ready tool", "you are not comfortable handling malicious samples"], "when_to_choose": ["you are a security researcher analyzing the Pinduoduo backdoor incident", "you need to unpack manwe or nvwa packed DEX payloads", "you want reference samples of real-world Android backdoor exploits"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/pinduoduo_backdoor_unpacker", "repo": "davinci1012/pinduoduo_backdoor_unpacker", "role": "main", "score": 30}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:06.512267+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T05:08:24.237832+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "c3ba184182b53f42fe445a04b2779e2a656db23dc8bec6d42585774361fa0cb9", "fetched_at": "2026-08-28T04:04:06.512267+00:00", "kind": "readme", "missing": false, "url": "https://github.com/davinci1012/pinduoduo_backdoor_unpacker"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 90, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1272, "days_push": 1255, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 30, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}