nebulallm typosquatting malware: malicious PyPI package executes remote DLL during pip install
Severity: critical · Patch status: no-fix-needed · Since 2026-10-25
The PyPI package nebulallm version 1.4.3 is malicious malware, published to the GitHub Advisory Database on 2026-10-25 as GHSA-mvgr-2gjf-h99c (CWE-506, Embedded Malicious Code). It is a typosquat that overrides the install command in setup.py so malicious code runs during pip install. On installation it downloads a JScript script, which in turn downloads and executes a malicious remote DLL/executable; the campaign is categorized as MALICIOUS with infostealer-like intent. Anyone who pip-installed nebulallm 1.4.3 has executed attacker code on their machine. There are no patched versions — the package itself is the malware — so remediation is removal, host forensics, and credential rotation. Credit: OpenSSF malicious-packages, analysis by kam193.
What to do
- Immediately uninstall nebulallm and purge it from requirements/lockfiles and CI caches
- Treat any machine or CI runner that installed it as compromised: rotate credentials, tokens, and keys accessible to that environment
- Hunt for the downloaded JScript/DLL artifacts and review endpoint telemetry for follow-on activity
- Block the package name in PyPI proxies/mirrors and audit for typosquats of similarly named LLM packages
Sources
All live incidents on Threat Watch
