MalwarePublished 21 Oct 2026Updated 29 Oct 2026

melcuratts (PyPI) · Malicious Code

Affects melcurattsSource GCVE Database

Malicious package : remove melcuratts and rotate any secrets on hosts that installed it.

Data as of 29 Oct 2026, 17:52 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-18141

What to do

Remove melcuratts from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPImelcuratts	Affected =0.1.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The PyPI package melcuratts version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not execute attacker-controlled code during installation or import, nor does it harvest credentials or communicate with attacker servers directly, it is designed to download and run remote malicious scripts. This behavior indicates a coordinated effort to distribute malicious payloads through deceptive loader packages.

Impact

The primary impact is the execution of remote malicious scripts, which can lead to compromise of the environment where the package is installed. Although the package does not itself contain payloads or backdoors, its ability to load and execute external code poses a significant security risk, potentially enabling further malicious activities such as data theft or system compromise.

Defensive guidance

Users should remove this package if installed and monitor for any suspicious activity related to its use. Additionally, organizations should implement controls to detect and block execution of unauthorized remote scripts.

Summary

The melcuratts 0.1.0 package on PyPI is identified as part of a malicious campaign named '2026-10-voice-synthesis-profiles'. The package acts as a loader that downloads and executes remote malicious scripts. No direct install-time or import-time malicious activity, credential harvesting, or persistence mechanisms were observed within the package itself. However, the campaign uses multiple similar loader packages to facilitate execution of attacker-controlled code from external URLs, indicating clear malicious intent.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 29 Oct 2026, 17:52 UTC

Technical details

References

Community reviews