dictanovaasr

{"schema_version":"1.7.4","id":"MAL-2026-18139","published":"2026-10-21T23:09:26Z","modified":"2026-10-29T14:38:27.565977566Z","summary":"Malicious code in dictanovaasr (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (3fd53cc46174e799bbe5340512eb53aa19d00168034876b49d53671f90b15b83)\nPackage dictanovaasr version 0.1.0 was examined and no evidence of exfiltration, install-time or import-time code execution from external sources, silent relay, credential harvesting, backdoor, or self-propagation was identified. No install-time network activity, no suspicious lifecycle hooks, and no reads of installer-side credential paths (such as ~/.aws, ~/.ssh, ~/.npmrc, or environment-variable scraping) were observed.\n\n## Source: kam193 (afc8d83a420096900bdccd11b4ed6f45011c624cbc47c25a486576418203f4dd)\nThis campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage remains unknown, they are clearly a coordinated campaign to place multiple deceptive ways to load malicious code.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-voice-synthesis-profiles\n\n\nReasons (based on the campaign):\n\n\n - Downloads and executes a remote malicious script.\n\n\n - other\n","affected":[{"package":{"name":"dictanovaasr","ecosystem":"PyPI"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"dictanovaasr-0.1.0-py3-none-any.whl","hashes":{"blake2b_256":"6b61331098a824b0662b86c3ed2cb7c84f240077a211e8c07b1a966f965b9db0","md5":"17ea21f432a67c62b1749824ed4d44e6","sha256":"8d36868ede9499daac1b5d2f209a00203171498a549ba72c10369186fb7c87be"}},{"filename":"dictanovaasr-0.1.0.tar.gz","hashes":{"blake2b_256":"b9cbe8ecb00e51b21b6a68f4ebfb8dff84e66d3cd76ebe8fe600321cbd743d77","md5":"216e9b37c8f074c281c33427aad24f84","sha256":"e56e7d1465011433819fd473024a3d993a4f156ac3d2016e3af30a96f06f878b"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/dictanovaasr"},{"type":"PACKAGE","url":"https://pypi.org/project/dictanovaasr/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-10-voice-synthesis-profiles/dictanovaasr","import_time":"2026-10-21T23:40:12.296674409Z","modified_time":"2026-10-21T23:09:26.083153Z","sha256":"afc8d83a420096900bdccd11b4ed6f45011c624cbc47c25a486576418203f4dd","source":"kam193","versions":["0.1.0"]},{"id":"pypi/2026-10-voice-synthesis-profiles/dictanovaasr","import_time":"2026-10-22T00:45:02.486549524Z","modified_time":"2026-10-21T23:25:35.466661Z","sha256":"8ea1aa1dde3e697fe85466d6dbe73db3de33ce20833db1ea1a8b35f028f6968d","source":"kam193","versions":["0.1.0"]},{"id":"pypi/2026-10-voice-synthesis-profiles/dictanovaasr","import_time":"2026-10-22T01:26:38.72325447Z","modified_time":"2026-10-21T23:25:35.466661Z","sha256":"026b35e488ef834bdc0bebb3c735b42e8a36c48d88d6ac29d4ba074e6098e2da","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022361","import_time":"2026-10-29T14:37:05.728930666Z","modified_time":"2026-10-29T14:22:56Z","sha256":"3fd53cc46174e799bbe5340512eb53aa19d00168034876b49d53671f90b15b83","source":"amazon-inspector","versions":["0.1.0"]},{"id":"pypi/2026-10-voice-synthesis-profiles/dictanovaasr","import_time":"2026-10-29T14:37:09.283565956Z","modified_time":"2026-10-21T23:25:35.466661Z","sha256":"f21161e80b868b09e05334dcfea0cfb61947cb0e22712b9b3125ba35186372c8","source":"kam193","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"ANALYST"}]}