# Trojan in common\_voice dataset?
**URL:**
**Author:**  [@kib-research](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fkib-research)%5C
**Post date:** [May 19, 2022, 2:36pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F1 "2022-05-19T14:36:04Z")
Today, I downloaded the common\_voice dataset and Windows defender claims to have found a Trojan named Oneeva.A!ml in there and classified it as a severe threat. As affected item it referred to a specific mp3-file in clips. I guess it was a false alarm, but I’d like to be sure. Does anyone know anything about this? Any help is much appreciated!
---
**Author:**  [@lhoestq](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Flhoestq)%5C
**Post date:** [May 20, 2022, 10:57am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F2 "2022-05-20T10:57:25Z")
Hi ! From where did you get this file ?
Did you download the dataset using load\_dataset ?
---
**Author:**  [@kib-research](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fkib-research)%5C
**Post date:** [May 20, 2022, 3:01pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F3 "2022-05-20T15:01:14Z")
Hi! Yes, I used load\_dataset. According to windows defender the affected item was common\_voice\_de\_17677975.mp3. After having removed the files, I ran a full system scan with no (further) threats detected. Thanks for asking!
---
**Author:**  [@lhoestq](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Flhoestq)%5C
**Post date:** [May 20, 2022, 4:30pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F4 "2022-05-20T16:30:49Z")
Ok thanks ! We’re taking a look at it 😉
---
**Author:**  [@conceptofmind](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fconceptofmind)%5C
**Post date:** [May 21, 2022, 3:57pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F5 "2022-05-21T15:57:42Z")
Hi @lhoestq ,
I have also noticed that in other datasets such as the one used in the Code Parrot training blog there are instances of files being scanned as unsafe - trojans, malware, spyware, etc. It looks as if they are all non-executable since they are stored in JSON format in the arrow files. For example, this file is marked as unsafe - Unsafe: Win.Trojan.MSShellcode-88.
> **[file-000000000029.json.gz · codeparrot/codeparrot-clean at main](https://huggingface.co/datasets/codeparrot/codeparrot-clean/blob/main/file-000000000029.json.gz)**
>
> We’re on a journey to advance and democratize artificial intelligence through open source and open science.
Thank you,
Enrico
---
**Author:**  [@kib-research](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fkib-research)%5C
**Post date:** [May 22, 2022, 4:23pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F6 "2022-05-22T16:23:52Z")
Hi, I forgot to mention that I downloaded the German common\_voice dataset–sorry about that!
---
**Author:**  [@lhoestq](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Flhoestq)%5C
**Post date:** [May 24, 2022, 10:23am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F7 "2022-05-24T10:23:57Z")
We scanned `common_voice_de_17677975.mp3` for malwares using clamscan and the file is OK 😉
Regarding the Code Parrot dataset, several files contain source code of malwares indeed (the dataset contains a big part of github so this is expected). But these are just text files so you are fine as long as your don’t try to execute the code 😉
---
**Author:**  [@kib-research](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fkib-research)%5C
**Post date:** [May 25, 2022, 7:42am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F8 "2022-05-25T07:42:12Z")
Thanks a lot for looking into it–that’s reassuring!
---
**Author:**  [@conceptofmind](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fconceptofmind)%5C
**Post date:** [June 30, 2022, 10:34pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Ftrojan-in-common-voice-dataset%2F18155%2F9 "2022-06-30T22:34:11Z")
Yes, you would hope that someone would not extract and execute those code segments. 😅
Thank you for the update.
Enrico