MAL-2026-18161 Malicious code in evalstream (PyPI)

Package evalstream 0.1.0 on PyPI was examined and no install-time or import-time behavior indicative of a supply-chain attack was observed. There is no evidence of credential or environment scraping, outbound network beacons to attacker-controlled destinations, remote code fetch-and-execute, lifecycle or build-backend code execution with external network I/O, or persistent/backdoor mechanisms. No third-party credentials, registry-redirecting configuration, or dependency-dropper patterns are present.

This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage remains unknown, they are clearly a coordinated campaign to place multiple deceptive ways to load malicious code.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-voice-synthesis-profiles

Reasons (based on the campaign):

• other

• Downloads and executes a remote malicious script.