is-it-ai (PyPI) · Malicious Code
Affects is-it-aiSource GCVE Database
Malicious package : remove is-it-ai and rotate any secrets on hosts that installed it.
Data as of 31 Oct 2026, 14:38 UTC
Malicious package
Published to PyPI · OSV MAL-2026-18426
What to do
Remove is-it-ai from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| PyPIis-it-ai | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
The is-it-ai package on PyPI contains malicious code in specific versions (0.1.0, 0.1.1, 0.1.3) that, when triggered, fingerprints the environment and contacts a remote server. If the server responds with a URL, the package downloads and executes a remote executable. This behavior is part of a targeted attack campaign involving intentional inclusion of malicious code in a dependency, designed to hide malicious actions behind legitimate package versions.