Malicious code in voxcpmui4 (PyPI)
The voxcpmui4 package on PyPI version 0.2.0 is identified as malicious software that masquerades as legitimate activity but actually deploys a cryptocurrency miner. This campaign, named 2026-10-voxeval, is categorized as malicious due to its intent to mine cryptocurrency without user consent.
AI Analysis
Technical Summary
The voxcpmui4 package (version 0.2.0) on PyPI is a malicious package that pretends to perform legitimate functions but instead installs and runs a cryptominer. This behavior is part of a campaign identified as 2026-10-voxeval, which is clearly malicious in nature, aiming to exploit users by unauthorized cryptocurrency mining.
Potential Impact
Users who install version 0.2.0 of the voxcpmui4 package risk having their systems compromised to run unauthorized cryptocurrency mining operations, which can degrade system performance and increase resource consumption without their knowledge or consent.
Mitigation Recommendations
No official patch or remediation is indicated. Users should avoid installing or using the voxcpmui4 package version 0.2.0. Remove any existing installations of this package to prevent unauthorized cryptomining activity.
Malicious code in voxcpmui4 (PyPI)
Description
The voxcpmui4 package on PyPI version 0.2.0 is identified as malicious software that masquerades as legitimate activity but actually deploys a cryptocurrency miner. This campaign, named 2026-10-voxeval, is categorized as malicious due to its intent to mine cryptocurrency without user consent.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The voxcpmui4 package (version 0.2.0) on PyPI is a malicious package that pretends to perform legitimate functions but instead installs and runs a cryptominer. This behavior is part of a campaign identified as 2026-10-voxeval, which is clearly malicious in nature, aiming to exploit users by unauthorized cryptocurrency mining.
Potential Impact
Users who install version 0.2.0 of the voxcpmui4 package risk having their systems compromised to run unauthorized cryptocurrency mining operations, which can degrade system performance and increase resource consumption without their knowledge or consent.
Defensive Guidance
No official patch or remediation is indicated. Users should avoid installing or using the voxcpmui4 package version 0.2.0. Remove any existing installations of this package to prevent unauthorized cryptomining activity.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-17467
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["PyPI"]
Threat ID: 6ac13969a43b0b3b89d5fbc1
Added to database: 10/03/2026, 17:20:41 UTC
Last enriched: 10/03/2026, 17:24:54 UTC
Last updated: 10/04/2026, 02:05:22 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.