# MAL-2026-10690: Malicious code in qwen-asr-pvt (PyPI)


- **Type:** Malicious package
- **Package:** `qwen-asr-pvt` (PyPI)
- **Published:** 15 Jul 2026

## What is MAL-2026-10690?

MAL-2026-10690 is a malicious package in qwen-asr-pvt, published on 15 Jul 2026. 

### Official description

The package's pyproject.toml declares an unpinned runtime dependency on `transformers4576`, a lookalike of the widely used HuggingFace `transformers` library. Every internal import that would normally reference `transformers` has been rewritten to `transformers4576` (e.g., `from transformers4576 import AutoConfig, AutoModel, AutoProcessor` reachable from __init__.py), so `pip install qwen-asr-pvt` forces pip to resolve and install the attacker-controlled `transformers4576` from PyPI. Whatever code is published under that name executes at install/import time on the installer's machine. The lure is reinforced by publisher impersonation: the package name `qwen-asr-pvt` (a `-pvt` suffix on the real `qwen-asr`), the `Alibaba Qwen Team` author metadata, and the homepage pointing at `https://github.com/Qwen/Qwen3-ASR` mimic the official Qwen3-ASR project, while the shipped source is copied from that upstream with import statements rewritten to the typosquat name. Together these signals form a dependency-confusion dropper: the flagged package is the lure, and the harm arrives through the attacker-controlled transitive.

## What should I do about MAL-2026-10690?

Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.

## Fix prompt for AI coding agents

```text
MAL-2026-10690 is a malicious package: qwen-asr-pvt (PyPI). Every version was published to cause harm.

Task:
1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.
2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.
3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.
4. If the package is not used anywhere, say so and change nothing.

Reference: https://insights.sbomify.com/MAL-2026-10690/ (Markdown: https://insights.sbomify.com/MAL-2026-10690/index.md)
```

## Sources

- OSV: https://osv.dev/vulnerability/MAL-2026-10690

---
From sbomify Insights: https://insights.sbomify.com/MAL-2026-10690/
Summaries are generated and may contain mistakes; the official description above is the record.