Malicious code in voxcpmruntime (PyPI)

Source: kam193 12f18950a276ca27a304d3053835b0102656168083e7ddf414fffb112cbe01ba The package imitates real activity and instead deploys a coin miner. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-voxeval Reasons based on the campaign: -...

Malicious Package

Overview voxcpmruntime is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17470 Malicious code in voxcpmruntime (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e0220a1b37d6391262539694a04726e2e5aea888941b384c4048d0a2443b2 The package presents itself as a VoxCPM TTS runtime but is a binary dropper and cryptominer loader. harness.run downloads two executables 'voxcpm-cor...

Malicious code in voxcpmruntime (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e0220a1b37d6391262539694a04726e2e5aea888941b384c4048d0a2443b2 The package presents itself as a VoxCPM TTS runtime but is a binary dropper and cryptominer loader. harness.run downloads two executables 'voxcpm-cor...