is-it-ai campaign: multi-convert, md-to-slides, skills-analyzer PyPI packages download and execute remote payloads
Severity: critical · Patch status: no-fix-needed · Since 2026-10-31
OpenSSF and GitHub advisory database reports (2026-10-31) describe a coordinated PyPI malware campaign, '2026-10-is-it-ai', in which the packages multi-convert, is-it-ai, md-to-slides and skills-analyzer were published with malicious intent. The malicious logic lives in specific versions of the is-it-ai dependency, deliberately pinned by the dependent packages; other releases act as cover. When triggered, the code fingerprints the environment, contacts a remote server, and if the server responds with a URL, downloads and executes the payload. The campaign is flagged as a targeted attack with the action hidden in library usage. Affected versions: multi-convert 0.1.0–0.1.5 (trigger in 0.1.4), is-it-ai 0.1.0/0.1.1/0.1.3, md-to-slides 0.1.0–0.1.3 (trigger in 0.1.1), skills-analyzer 0.1.0–0.1.2 (trigger in 0.1.1). No patched versions exist; all affected releases should be treated as malware.
What to do
- Immediately remove and purge all listed versions of multi-convert, is-it-ai, md-to-slides and skills-analyzer from environments and dependency caches
- Audit lockfiles and requirements for any of these packages or the is-it-ai dependency, including transitive pins
- If installed, assume compromise: fingerprinting and remote payload execution occurred — rebuild affected hosts/containers from clean images
- Rotate credentials, tokens and secrets accessible from affected machines
- Check proxy/EDR logs for connections to the campaign's remote server and any downloaded executables
- Block known campaign indicators and monitor for related package names
Sources
All live incidents on Threat Watch
