MAL-2026-17463

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/voxcpmtts3/MAL-2026-17463.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-17463
Published
2026-10-03T04:47:46Z
Modified
2026-10-04T23:45:21Z
Summary
Malicious code in voxcpmtts3 (PyPI)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5)

The package presents itself as a text-to-speech inference library but ships two bundled binaries that implement a cryptojacking payload. voxcpmtts3/bin/voxcpm-core is XMRig (contains Monero/RandomX/CryptoNight/stratum/Hashrate/DONATE strings); harness.run() chmods it executable and spawns it via subprocess.Popen with a JSON config whose top-level key is assembled by string concatenation ("po"+"ols") to evade static analysis, carrying stratum-protocol fields (user/pass/keepalive/tls). A second bundled binary, voxcpmtts3/bin/cloudflared (~40MB), is launched with 'access tcp --hostname --url 127.0.0.1:' to open a raw TCP tunnel through Cloudflare Access, hiding the real mining pool address behind a Cloudflare Access hostname and defeating destination-based blocking; a code comment acknowledges the design is to keep the traffic readable at the Cloudflare front door. In parallel, self._hb() POSTs run_id, state, Python tracebacks (up to 4000 chars) and timestamps to https:///hb through the same attacker-controlled Cloudflare Access hostname, giving the operator a per-victim telemetry channel that also leaks local filesystem paths from error traces. The 'TTS inference', 'coordinator', and 'step/loss/tok/s' terminology in code and README is cover for stratum mining pool concepts.

Source: kam193 (382411a9cc0ee358dbd8efcf17c5a943fc496fc4f2c86ffdc8f87d7efc43ec2d)

The package imitates real activity and instead deploys a coin miner.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-voxeval

Reasons (based on the campaign):

  • cryptominer
Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "pypi/2026-10-voxeval/voxcpmtts3",
            "import_time": "2026-10-03T05:18:10.33590657Z",
            "modified_time": "2026-10-03T04:47:46.415211Z",
            "sha256": "382411a9cc0ee358dbd8efcf17c5a943fc496fc4f2c86ffdc8f87d7efc43ec2d",
            "source": "kam193",
            "versions": [
                "0.1.0",
                "0.1.1",
                "0.1.2"
            ]
        },
        {
            "id": "IN-MAL-2026-020924",
            "import_time": "2026-10-04T23:40:42.502124902Z",
            "modified_time": "2026-10-04T23:20:31Z",
            "sha256": "208e19b8b5c2d9ed6169765b2b5985147d0be136e9bb5f83adac6cc691ff4aa5",
            "source": "amazon-inspector",
            "versions": [
                "0.1.2"
            ]
        },
        {
            "id": "IN-MAL-2026-020922",
            "import_time": "2026-10-04T23:40:42.310472589Z",
            "modified_time": "2026-10-04T23:20:14Z",
            "sha256": "9d7d7476702ef89959e2c63507d596f94f468a01bc8ce00c551fbed2f5efcf29",
            "source": "amazon-inspector",
            "versions": [
                "0.1.1"
            ]
        },
        {
            "id": "IN-MAL-2026-020923",
            "import_time": "2026-10-04T23:40:42.404473244Z",
            "modified_time": "2026-10-04T23:20:23Z",
            "sha256": "aa2cca2e72cf0e735230017b491728f699d1b4cd8137088f12791db0d3a1681c",
            "source": "amazon-inspector",
            "versions": [
                "0.1.0"
            ]
        }
    ]
}
References
Credits

Affected packages

PyPI / voxcpmtts3

Package

Name
voxcpmtts3
View open source insights on deps.dev
Purl
pkg:pypi/voxcpmtts3

Affected ranges

Affected versions

0.*
0.1.0
0.1.1
0.1.2

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    },
    {
        "cweId": "CWE-506",
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files": [
        {
            "path": "voxcpmtts3/harness.py",
            "sha256": "1768a472ef62834992dca0ea3169ba2839969eca2ab412f1423f606c01b8f05d",
            "tlsh": "500253f2d9151e229397ca264a56b983670a6c53a74e18747cfcc3082f9477482f0efa"
        }
    ],
    "package_integrity": [
        {
            "filename": "voxcpmtts3-0.1.2-py3-none-any.whl",
            "hashes": {
                "blake2b_256": "500d3aeafab9f4ff86f5b6de101cae70e59260aa6c57917289da5c4cb1a39054",
                "md5": "7f4827ac2811273bc3f41dc4fa9ec254",
                "sha256": "9509cb196a001b1244c289c2af4614a4022a449c865859188da28ddd65170d46"
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/pypi/voxcpmtts3/MAL-2026-17463.json"