MalwarePublished 21 Oct 2026Updated 29 Oct 2026

grommatts (PyPI) · Malicious Code

Affects grommattsSource GCVE Database

Malicious package : remove grommatts and rotate any secrets on hosts that installed it.

Data as of 29 Oct 2026, 17:52 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-18140

What to do

Remove grommatts from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIgrommatts	Affected =0.1.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The grommatts package on PyPI version 0.1.0 is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although the package itself does not contain direct malicious payloads or install-time network activity, it facilitates downloading and executing remote malicious scripts. This behavior is indicative of a coordinated effort to deploy deceptive loaders for malicious code execution.

Impact

The package enables execution of remote malicious scripts, which can lead to the execution of arbitrary code on the host system. This can facilitate further malicious activities depending on the payload delivered by the remote script. The package itself does not directly harvest credentials or perform persistence, but its use as a loader for malicious code poses a significant security risk.

Defensive guidance

Since this is a malicious package identified on PyPI, the primary mitigation is to avoid installing or using the grommatts package version 0.1.0. Security teams should ensure that their Python package sources are trusted and monitor for the presence of this package in their environments.

Summary

The grommatts package (version 0.1.0) is identified as part of a malicious campaign named '2026-10-voice-synthesis-profiles'. The package acts as a loader that executes code fetched from remote URLs. It does not perform install-time network activity, credential or filesystem harvesting, shell execution of fetched content, or persistence mechanisms in its shipped source. However, its primary threat lies in enabling the execution of remote malicious scripts, making it a vector for delivering malicious payloads indirectly.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 29 Oct 2026, 17:52 UTC

Technical details

References

Community reviews