The qwen-asr-pvt PyPI package is a malicious dropper that leverages dependency confusion by declaring an unpinned runtime dependency on transformers4576, a lookalike of the popular HuggingFace transformers library. The package's source code is copied from the legitimate Qwen3-ASR project but rewritten to import transformers4576 instead of transformers. Installing qwen-asr-pvt causes pip to resolve and install the attacker-controlled transformers4576 package, which executes malicious code at install or import time on the victim's machine. The package also uses publisher impersonation metadata and homepage URLs to mimic the official Alibaba Qwen team project, increasing the likelihood of victim trust and installation.

Installing or importing qwen-asr-pvt results in execution of attacker-controlled code via the malicious transformers4576 dependency. This can lead to arbitrary code execution on the installer's machine, potentially compromising system integrity and confidentiality. The attack exploits trust in the legitimate Qwen3-ASR project and the PyPI ecosystem's dependency resolution process.

No official patch or fix is available as this is a malicious package published on PyPI. Users should avoid installing qwen-asr-pvt and verify package authenticity before installation. Use strict dependency pinning and verify package sources and authorship. Monitor for typosquatting packages in dependencies. Consider using tools that detect malicious or typosquatting packages in the supply chain.