Seven PyPI packages impersonating AI voice-synthesis tools flagged as malware

GitHub's Advisory Database and the OSSF malicious-packages project flagged seven PyPI packages impersonating AI voice-synthesis tools as malware. Four packages, eulaliatts, evalometer, ferrotts and lumitts, were listed on November 12, 2026, with three more, qwen3ttsui, voxcpmttslora and garvisometerui, added on November 13, 2026, according to the OSV advisory for eulaliatts.

What changed

• Seven packages were flagged as malware: eulaliatts, evalometer, ferrotts and lumitts, published on November 12, 2026, and qwen3ttsui, voxcpmttslora and garvisometerui, published on November 13, 2026
• All seven packages were published at version 0.1.0
• Each package name imitates a real AI voice-synthesis or text-to-speech tool, including Alibaba's open-source Qwen3-TTS and VoxCPM TTS LoRA fine-tuning tooling
• Instead of embedding a payload directly, each package works as a loader that downloads and runs a remote script
• Researcher Kamil Mankowski reported the campaign, which is tracked as part of a wider wave that also hit PyPI in October 2026
• No patched version exists for any of the seven packages

What it means for people building with AI

The campaign targets developers and creators building with AI audio tools specifically, showing that supply-chain attackers are now tailoring malicious package names to the generative-media and AI-dev-tool ecosystem. Anyone pulling TTS or voice-synthesis packages from PyPI should double-check exact names against the real projects, since a single-character difference can lead to a loader that fetches and executes outside code.

No fix, just removal

Because none of the seven packages has a patched release, the only mitigation is removing them entirely and verifying package names against legitimate tools, as detailed in the OSV advisory for qwen3ttsui.

Sources

• MAL-2026-19179 (eulaliatts, PyPI) (OSV / OSSF malicious-packages, November 12, 2026, official)
• MAL-2026-19207 (qwen3ttsui, PyPI) (OSV / OSSF malicious-packages, November 13, 2026, official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.