The evalstream package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain a direct malicious payload or exhibit typical supply-chain attack behaviors such as credential scraping or persistent backdoors, it is designed to download and execute remote malicious scripts. This behavior indicates a coordinated effort to provide multiple deceptive methods to load malicious code remotely.
The speakbench package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. Although the package itself does not show installer-side harm or suspicious behavior during installation or import, it is designed to fetch and run malicious code from external sources. This activity indicates a coordinated effort to distribute malware through deceptive loader packages.
The audiokit package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. While the package itself does not contain the payload or exhibit harmful behavior at install or import time, it serves as a deceptive loader to fetch malicious code. This campaign is identified as having clear malicious intent.
The phonemeforge package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. While the package itself does not exhibit installer-facing harm such as network activity or credential theft during installation or import, it is designed to load and run potentially harmful code from external sources.
The vocabbench package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to download and execute remote malicious scripts. Although this specific package version does not exhibit direct credential theft, remote code execution, or backdoor behavior on its own, it serves as a mechanism to load malicious code from external sources. This activity is part of a coordinated campaign with clearly malicious intent.
The speechprobe package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages designed to download and execute remote malicious scripts. Although the package itself does not exhibit install-time, import-time, or runtime behaviors that compromise the installer or exfiltrate data, it serves as a deceptive loader for executing malicious code from external URLs.
The soundsocket package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although this specific package version does not exhibit direct malicious behavior such as credential theft or network activity at install or import time, it is intended to download and execute remote malicious scripts as part of a coordinated effort to deploy malware.
The PyPI package modelworks version 0.1.0 is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the analyzed version itself does not exhibit installer-harm behavior or direct malicious activity, it is associated with a coordinated effort to deploy deceptive loaders that download and execute remote malicious scripts.
The ttsprobe package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although the package itself does not contain the malicious payload, it facilitates downloading and executing remote malicious scripts. No direct install-time or import-time malicious behaviors were detected in the package contents. This activity is part of a coordinated campaign with clearly malicious intent.
The voxweaver 0.1.0 package on PyPI is part of a malicious campaign distributing loader packages that execute code from remote URLs. Although the package itself does not contain installer-side harm or direct malicious payloads, it facilitates downloading and executing remote malicious scripts. This behavior indicates a coordinated effort to provide multiple deceptive methods for loading malicious code.
The speaksocket package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although this specific package version does not exhibit behaviors such as credential theft, remote code execution, or backdoor activity, it is designed to download and execute remote malicious scripts. This activity indicates a coordinated effort to distribute malicious code through deceptive loaders.
The asrdock package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the package itself does not exhibit installer-side harm such as network activity or credential theft during installation or import, it is intended to download and execute remote malicious scripts. This behavior indicates a coordinated effort to distribute malicious code through deceptive loaders.
The pipegrip 0.1.0 Python package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not exhibit install-time or import-time network activity, nor does it perform credential theft or other direct malicious actions, it serves as a mechanism to download and execute remote malicious scripts. This campaign is identified as having clearly malicious intent.
The hookgantry 0.1.0 package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain the malicious payload, it is designed to download and run remote malicious scripts, indicating coordinated malicious intent. No installer-side harm or credential harvesting was detected during scanning, but the package facilitates executing potentially harmful code.
The acousticpack 0.1.0 package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain direct malicious payloads or indicators of credential theft, exfiltration, or destructive behavior, it is designed to download and run remote malicious scripts. This activity indicates a coordinated effort to distribute malware through deceptive means.
The dictanovaasr package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. Although the examined package showed no direct evidence of exfiltration, credential harvesting, or backdoors, it is designed to execute code from external URLs, indicating a coordinated effort to distribute malicious payloads.
The orchestril package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not contain a direct malicious payload or installer-side harm, it is designed to download and run remote malicious scripts, indicating clear malicious intent. No evidence of installer credential theft or persistent backdoors was found in this specific version.
The prosodinetts 0.1.0 package on PyPI is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the package itself does not exhibit install-time or import-time behaviors such as reading secrets, network communication to attacker domains, or persistence mechanisms, it is associated with a coordinated effort to deliver malicious payloads remotely.
The codecraze package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not contain the malicious payload, it facilitates downloading and executing remote malicious scripts. Analysis found no direct supply-chain attack indicators such as install-time or import-time network activity or credential scraping in the shipped files. This campaign is identified as having clearly malicious intent, including potential infostealer activity.
The solivoxtts package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to download and execute remote malicious scripts. Although the package itself does not show harmful behavior during installation or import, it is intended to serve as a vector for executing malicious code fetched from external sources.