Hostile 92% python Download

voxel-tts 0.5.0

Bundled XMRig miner, C2 tunnel

“Evaluation harness for VoxelTTS CPU inference workloads”

Detects Linux.Trojan.PornoassetDetects XMRig ELF
SHA-25684e93a0ac30511ea48e94cfc1bba4cf49339c60dfabf4760e34604629c32e65b
URLhttps://files.pythonhosted.org/packages/58/5a/cec603109e61864a2debeb9141919d0ef679d11af14fd8cc4ff5281fd45d/voxel_tts-0.5.0-py3-none-any.whl
MaleculeK₃(LiLuTe₂)O₉(C₆I₃AsCaDy₂Er₂LaP₂S)H₉(Cm₄₀Cr₁₃Db₁₀F₁₈MgOs₁₆Po₁₅Ti₂U)Md₇(Bi₄BkHe₂In₄PaPt)Th₂

Also flagged by osv (MAL-2026-17461: Malicious code in voxel-tts (PyPI)) +3 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.