2026-10-voice-synthesis-profiles: malicious PyPI loader packages qwen3ttsui, voxcpmttslora, garvisometerui download and execute remote scripts
Severity: critical · Patch status: no-fix-needed · Since 2026-11-13
GitHub Advisory Database, crediting OpenSSF's malicious-packages project and researcher kam193, published malware advisories on 2026-11-13 for three PyPI packages: qwen3ttsui (GHSA-jh3g-jv4f-xccp), voxcpmttslora (GHSA-57cv-8g8v-9vg9) and garvisometerui (GHSA-85xg-c949-ffc6). All are version 0.1.0, severity critical, CWE-506 embedded malicious code, and belong to a coordinated campaign tracked as 2026-10-voice-synthesis-profiles. The packages act as loaders that download and execute a script from an attacker-controlled URL; they do not embed the final payload, but are clearly deceptive staging for malicious code such as infostealers. No patched versions exist; the packages should be treated as malware and removed.
What to do
- Search environments and dependency lockfiles for qwen3ttsui, voxcpmttslora and garvisometerui and remove them immediately
- Audit systems where these packages were installed for signs of executed remote code, credential theft or persistence
- Rotate credentials and secrets on affected machines
- Block these package names in PyPI mirrors/proxies and internal dependency allowlists
- Prefer vetted voice-synthesis/TTS packages and enforce dependency scanning and provenance checks
Sources
All live incidents on Threat Watch
