# davinci1012/pinduoduo_backdoor_unpacker

Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

Repository: https://github.com/davinci1012/pinduoduo_backdoor_unpacker
Canonical: https://ross.abutalabs.com/products/pinduoduo_backdoor_unpacker
Language: Java
License Family: other
Last push: 2023-03-27T13:22:57+00:00

## Health v2 (maintenance only)
Score: 30/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 90
- inputs: {"age_days": 1272, "days_push": 1255, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1242, forks 497 (observed 2026-08-28T04:04:06.512267+00:00)

## What it is
A collection of malicious backdoor and exploit samples extracted from the Pinduoduo Android app, along with Java-based unpacker scripts for its manwe (.mw1) and nvwa (.nw0) packers. The unpackers dump protected DEX payloads into Java class files for analysis in tools like jadx.

## Use cases
- unpack pinduoduo .mw1 manwe packed samples
- unpack .nw0 nvwa files into java classes
- analyze pinduoduo android backdoor samples
- study dynamically delivered android malware payloads
- reverse engineer packed dex files for malware research

## When to choose
- you are a security researcher analyzing the Pinduoduo backdoor incident
- you need to unpack manwe or nvwa packed DEX payloads
- you want reference samples of real-world Android backdoor exploits

## When to avoid
- you need a maintained general-purpose Android unpacker
- you require a licensed, production-ready tool
- you are not comfortable handling malicious samples

## Facets
- artifact type: dataset
- maturity: maintenance
- function: reverse-engineering, security, parser
- domain: security, reverse-engineering, android-tools
- platform: jvm
- tags: malware-analysis, unpacker, android-backdoor, pinduoduo, exploit-samples, dex-unpacking, android

## Member repositories
- davinci1012/pinduoduo_backdoor_unpacker (main) score 30

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:06.512267+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:08:24.237832+00:00, confidence not recorded.
  - readme: https://github.com/davinci1012/pinduoduo_backdoor_unpacker (fetched 2026-08-28T04:04:06.512267+00:00, sha c3ba184182b5)
- Data as of 2026-08-30T08:39:29.467469+00:00.