{"answers":{"affected":"1 open source package ship an affected version, including voxcpmui3.","exploited":"There is no known exploitation of MAL-2026-17464 in the wild and no public exploit code.","fix":"Remove the package from your dependencies and lockfiles, then rotate any secrets on machines where it was installed.","what":"MAL-2026-17464 is a malicious package in voxcpmui3, published on 3 Oct 2026."},"fix_prompt":"MAL-2026-17464 is a malicious package: voxcpmui3 (PyPI). Every version was published to cause harm.\n\nTask:\n1. Search this repository's dependency manifests and lockfiles for the package, including transitive dependencies.\n2. If it is present, remove it, regenerate the lockfile with the project's package manager, and replace whatever it was used for.\n3. List any CI runners, developer machines or containers that installed it, so their secrets can be rotated.\n4. If the package is not used anywhere, say so and change nothing.\n\nReference: https://insights.sbomify.com/MAL-2026-17464/ (Markdown: https://insights.sbomify.com/MAL-2026-17464/index.md)","id":"MAL-2026-17464","markdown":"https://insights.sbomify.com/MAL-2026-17464/index.md","name":"MAL-2026-17464","record":{"aliases":[],"analysis":null,"analysis_generated_by":null,"assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"The package presents itself as a text-to-speech inference harness but contains no TTS code. On calling the exported Harness.run, the module chmods +x and spawns a bundled ~8MB native binary at bin/voxcpm-core with a JSON config whose fields match a stratum mining pool (url/user/pass/keepalive/tls under a dict key, cpu.threads, cpu.mem-locked, cache-budget). The miner's pool-list key is assembled by string concatenation (\"po\"+\"ols\") rather than written as a literal, an evasion of static scanners that search for the literal key. A ~40MB cloudflared binary is also bundled and invoked as `cloudflared access tcp --hostname \u003cedge\u003e --url 127.0.0.1:\u003cport\u003e`, so the native core connects to loopback while traffic is tunneled through a Cloudflare-Access-protected hostname chosen by the caller — concealing the mining pool destination from network egress monitoring. The harness emits fabricated step/loss/tok-s progress lines generated from a seeded random.Random to maintain the training cover story. The combined effect is that installers who follow the README donate CPU cycles to the author's mining pool while the destination is obscured behind a tunneling binary.\n\nThe package imitates real activity and instead deploys a coin miner.\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\nCampaign: 2026-10-voxeval\n\nReasons (based on the campaign):\n\n - cryptominer","ecosystems":["PyPI"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":false,"headline":"Malicious code in voxcpmui3 (PyPI)","id":"MAL-2026-17464","indexable":true,"kev":null,"kind":"malicious","links":{"ecosystem":"PyPI","product":null,"products":[],"type":null,"year":"2026"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"PyPI","fixed":[],"introduced":[],"last_affected":[],"package":"voxcpmui3","purl":"pkg:pypi/voxcpmui3","source":"MAL-2026-17464"}],"products":null,"published":"2026-10-03","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"OpenSSF Malicious Packages","prefix":"MAL"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":null,"url":"https://insights.sbomify.com/MAL-2026-17464/"}