The speechprobe package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages designed to download and execute remote malicious scripts. Although the package itself does not exhibit install-time, import-time, or runtime behaviors that compromise the installer or exfiltrate data, it serves as a deceptive loader for executing malicious code from external URLs.
The soundsocket package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although this specific package version does not exhibit direct malicious behavior such as credential theft or network activity at install or import time, it is intended to download and execute remote malicious scripts as part of a coordinated effort to deploy malware.
The PyPI package modelworks version 0.1.0 is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the analyzed version itself does not exhibit installer-harm behavior or direct malicious activity, it is associated with a coordinated effort to deploy deceptive loaders that download and execute remote malicious scripts.
The ttsprobe package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although the package itself does not contain the malicious payload, it facilitates downloading and executing remote malicious scripts. No direct install-time or import-time malicious behaviors were detected in the package contents. This activity is part of a coordinated campaign with clearly malicious intent.
The voxweaver 0.1.0 package on PyPI is part of a malicious campaign distributing loader packages that execute code from remote URLs. Although the package itself does not contain installer-side harm or direct malicious payloads, it facilitates downloading and executing remote malicious scripts. This behavior indicates a coordinated effort to provide multiple deceptive methods for loading malicious code.
The speaksocket package on PyPI version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although this specific package version does not exhibit behaviors such as credential theft, remote code execution, or backdoor activity, it is designed to download and execute remote malicious scripts. This activity indicates a coordinated effort to distribute malicious code through deceptive loaders.
The asrdock package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the package itself does not exhibit installer-side harm such as network activity or credential theft during installation or import, it is intended to download and execute remote malicious scripts. This behavior indicates a coordinated effort to distribute malicious code through deceptive loaders.
The pipegrip 0.1.0 Python package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not exhibit install-time or import-time network activity, nor does it perform credential theft or other direct malicious actions, it serves as a mechanism to download and execute remote malicious scripts. This campaign is identified as having clearly malicious intent.
The hookgantry 0.1.0 package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain the malicious payload, it is designed to download and run remote malicious scripts, indicating coordinated malicious intent. No installer-side harm or credential harvesting was detected during scanning, but the package facilitates executing potentially harmful code.
The acousticpack 0.1.0 package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain direct malicious payloads or indicators of credential theft, exfiltration, or destructive behavior, it is designed to download and run remote malicious scripts. This activity indicates a coordinated effort to distribute malware through deceptive means.
The dictanovaasr package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that download and execute remote malicious scripts. Although the examined package showed no direct evidence of exfiltration, credential harvesting, or backdoors, it is designed to execute code from external URLs, indicating a coordinated effort to distribute malicious payloads.
The orchestril package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not contain a direct malicious payload or installer-side harm, it is designed to download and run remote malicious scripts, indicating clear malicious intent. No evidence of installer credential theft or persistent backdoors was found in this specific version.
The prosodinetts 0.1.0 package on PyPI is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although the package itself does not exhibit install-time or import-time behaviors such as reading secrets, network communication to attacker domains, or persistence mechanisms, it is associated with a coordinated effort to deliver malicious payloads remotely.
The codecraze package version 0.1.0 on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. While the package itself does not contain the malicious payload, it facilitates downloading and executing remote malicious scripts. Analysis found no direct supply-chain attack indicators such as install-time or import-time network activity or credential scraping in the shipped files. This campaign is identified as having clearly malicious intent, including potential infostealer activity.
The solivoxtts package version 0.1.0 on PyPI is part of a malicious campaign that involves loader packages designed to download and execute remote malicious scripts. Although the package itself does not show harmful behavior during installation or import, it is intended to serve as a vector for executing malicious code fetched from external sources.
The PyPI package tessivatts version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain direct malicious payloads or harmful installer-side behavior, it is designed to download and execute remote malicious scripts. This campaign is identified as having clear malicious intent, including potential infostealer activity.
The PyPI package 'vellutts' version 0.1.0 is part of a malicious campaign involving loader packages that execute code from remote URLs. Although this specific package version does not show direct evidence of exfiltration or remote code execution within its files, it is designed to download and run remote malicious scripts. This activity is indicative of a coordinated effort to deploy deceptive loaders for executing malicious payloads.
The grommatts package on PyPI version 0.1.0 is part of a malicious campaign that involves loader packages designed to execute code from remote URLs. Although the package itself does not contain direct malicious payloads or install-time network activity, it facilitates downloading and executing remote malicious scripts. This behavior is indicative of a coordinated effort to deploy deceptive loaders for malicious code execution.
The zennittts package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. These packages do not contain the payload themselves but serve as deceptive loaders to run malicious code from external URLs.
The PyPI package 'aurenatts' version 0.1.0 is part of a malicious campaign involving loader packages designed to execute code from remote URLs. Although this specific package version does not show evidence of direct exfiltration, remote code execution at install time, or other common malicious behaviors, it functions as a loader that downloads and executes remote malicious scripts. This activity indicates a coordinated effort to distribute malicious code through deceptive means.