otterload

{"schema_version":"1.7.4","id":"MAL-2026-18233","published":"2026-10-23T15:52:45Z","modified":"2026-10-29T14:38:27.682017257Z","summary":"Malicious code in otterload (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a18fefd3ce281d250aec34b05b6f11f1100968f8bda69e9961b795031fd5bb1b)\nNo a static rule matches and no traced-code findings were produced for otterload 0.1.0 on PyPI. The package exhibits no lifecycle-time network activity, no credential or filesystem reads targeting installer-side secrets, no fetch-and-execute of remote content, no silent-relay of caller-supplied data, and no persistence mechanisms.\n\n## Source: kam193 (6860fc5e0584389884eadd8bf39289d71d5c8c6dc01ca64603f3af344be8d755)\nThis campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage remains unknown, they are clearly a coordinated campaign to place multiple deceptive ways to load malicious code.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-10-voice-synthesis-profiles\n\n\nReasons (based on the campaign):\n\n\n - other\n\n\n - Downloads and executes a remote malicious script.\n","affected":[{"package":{"name":"otterload","ecosystem":"PyPI"},"versions":["0.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"otterload-0.1.0-py3-none-any.whl","hashes":{"blake2b_256":"b2a93828a0d7c93663dcf51593ce3f47c66ac2de433eb650a7d205cab6bb3c56","md5":"f2cc5606d524d11501de2ab62aad1ea9","sha256":"b3d9efe5288bfed085918dc7559c81dd0b3ac54393ab457f482ff4f8dc715061"}},{"filename":"otterload-0.1.0.tar.gz","hashes":{"blake2b_256":"ab19431e05d8ffa9731bbf2c6f328e8e15ef7e3911b27b2f2e655b6d83aaf5b0","md5":"27442db39a3c9b4cc1de74f2a33c9303","sha256":"ae1610b1d362791645e61097ece3c1c33f095b6468d27378f14f17a67fb7043d"}}]}}}],"references":[{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/otterload"},{"type":"PACKAGE","url":"https://pypi.org/project/otterload/0.1.0/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-10-voice-synthesis-profiles/otterload","import_time":"2026-10-23T16:20:13.982675478Z","modified_time":"2026-10-23T15:52:45.795177Z","sha256":"6860fc5e0584389884eadd8bf39289d71d5c8c6dc01ca64603f3af344be8d755","source":"kam193","versions":["0.1.0"]},{"id":"IN-MAL-2026-022316","import_time":"2026-10-29T14:37:03.55400459Z","modified_time":"2026-10-29T14:16:57Z","sha256":"a18fefd3ce281d250aec34b05b6f11f1100968f8bda69e9961b795031fd5bb1b","source":"amazon-inspector","versions":["0.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}