MalwarePublished 22 Oct 2026Updated 29 Oct 2026

speechprobe (PyPI) · Malicious Code

Affects speechprobeSource GCVE Database

Malicious package : remove speechprobe and rotate any secrets on hosts that installed it.

Data as of 29 Oct 2026, 17:40 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-18168

What to do

Remove speechprobe from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIspeechprobe	Affected =0.1.0	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The speechprobe package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages designed to download and execute remote malicious scripts. Although the package itself does not exhibit install-time, import-time, or runtime behaviors that compromise the installer or exfiltrate data, it serves as a deceptive loader for executing malicious code from external URLs.

Impact

The package enables execution of remote malicious scripts, which can lead to arbitrary code execution on the host system. This can potentially allow attackers to perform unauthorized actions depending on the downloaded payload. However, no direct compromise of installer secrets or data exfiltration was observed in the package itself.

Defensive guidance

Users should avoid installing or using the speechprobe package version 0.1.0 from PyPI. Employing strict package source verification and monitoring for suspicious package activity is recommended to prevent execution of malicious loaders.

Summary

The speechprobe PyPI package version 0.1.0 is identified as part of a coordinated malicious campaign named '2026-10-voice-synthesis-profiles'. The package does not contain direct malicious payloads or lifecycle hooks that perform network I/O or credential theft. Instead, it functions as a loader that downloads and executes remote malicious scripts. This behavior indicates a strategy to evade detection by separating the loader from the actual malicious payload. No public exploits or in-the-wild exploitation have been reported. The campaign is classified as malicious due to its intent to execute remote code.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 29 Oct 2026, 17:40 UTC

Technical details

References

Community reviews