Benign python 264,558 installs Download

xraylarch 2026.3.1

Legitimate scientific package

“Larch: X-ray Analysis for Synchrotron Applications using Python”

Archive ships a root-level test treeShell runs a variable command with args
SHA-256f2225ba1b31f2c7bcb09e0abfd81733e26fe7687aa3cb5bd8495e2f1f131b903

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.