Malicious code in driftwavets (PyPI)

The 'driftwavets' package on PyPI, specifically version 0.1.0, is identified as malicious software that masquerades as an audio-analysis tool. Its true purpose is to download and execute remote malicious scripts, likely as part of a broader coin-mining campaign known as 2026-10-voxeval. The package does not embed the malicious URL directly, complicating detection. This behavior categorizes it as a malicious package rather than a traditional vulnerability in software.

Users who install the 'driftwavets' package version 0.1.0 risk executing remote malicious code, which can lead to unauthorized actions on their systems, including potential coin-mining or other malicious activities. The package's intent is clearly malicious, posing a security risk to affected environments.

Avoid installing the 'driftwavets' package version 0.1.0 from PyPI. Remove any existing installations of this package. Since this is a malicious package rather than a software vulnerability, no patch is available. Users should rely on trusted sources and verify package authenticity before installation.