Suspicious 80% python Download

voxcpmruntime 0.1.0

downloads and executes remote binaries

“CPU inference runtime for VoxCPM text-to-speech evaluation”

Python Popen redirects output to DEVNULLImports Python's subprocess module
SHA-2561bfef2ae6c1de8605d1939f7429f1fc5a866d54d17fd6339cf7e8b00d44bcfed
URLhttps://files.pythonhosted.org/packages/02/0c/af87811a1d2da2e3e162d7e2a1208dac53cb9726d925e4408edcea10e85d/voxcpmruntime-0.1.0-py3-none-any.whl
MaleculeK(Te)O₃(ErEuS₂)H₈(Cm₁₄Cr₂Db₅F₅MgOs₂Po₄Ti₂)Md₂(In₈Pa)

Also flagged by osv (MAL-2026-17470: Malicious code in voxcpmruntime (PyPI)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.