Malicious code in voltswannts (PyPI)

The 'voltswannts' package on PyPI, specifically version 0.1.0, is part of a malicious campaign that masquerades as an audio-analysis tool but is designed to execute remote code. The package does not embed the malicious URL directly but downloads and runs a remote script, indicating a continuation of a previous coin-mining campaign named 2026-10-voxeval. This behavior classifies it as malware with clear intent to compromise systems.

Installation of this package can lead to execution of unauthorized remote code on the affected system, potentially enabling further malicious activities such as coin mining or data theft. The package's deceptive nature increases the risk of inadvertent installation by users expecting legitimate functionality.

Users should avoid installing the 'voltswannts' package, especially version 0.1.0. Remove any existing installations immediately. Since no official patch or fix is available, the best mitigation is to rely on trusted package sources and verify package authenticity before installation.