MAL-2026-18233: Malicious code in otterload (PyPI)

Published Oct 23, 2026

Updated

--- -= Per source details. Do not edit below this line.=-

Source: amazon-inspector (a18fefd3ce281d250aec34b05b6f11f1100968f8bda69e9961b795031fd5bb1b) No a static rule matches and no traced-code findings were produced for otterload 0.1.0 on PyPI. The package exhibits no lifecycle-time network activity, no credential or filesystem reads targeting installer-side secrets, no fetch-and-execute of remote content, no silent-relay of caller-supplied data, and no persistence mechanisms.

Source: kam193 (6860fc5e0584389884eadd8bf39289d71d5c8c6dc01ca64603f3af344be8d755) This campaign consists of similar loader packages, which provide executing code from a given URL. While they do not contain the malicious payload and the usage remains unknown, they are clearly a coordinated campaign to place multiple deceptive ways to load malicious code.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-10-voice-synthesis-profiles

Reasons (based on the campaign):

- other

- Downloads and executes a remote malicious script.

Affected Software

1 affected component

pip/otterload=0.1.0

Event History

Oct 23, 2026

Advisory Published

via OSV·03:52 PM

Data Sourced

via OSV·03:52 PM

DescriptionAffected Software

Frequently Asked Questions

What does an attacker need to exploit this package?

The package is described as a loader that executes code from a URL supplied to it. Exploitation therefore depends on a user or calling application invoking it with an attacker-controlled or malicious URL.

Is there evidence that installing otterload 0.1.0 alone performs malicious activity?

The available analysis reported no lifecycle-time network activity, installer-side credential or filesystem secret reads, remote fetch-and-execute behavior, data relaying, or persistence mechanisms for version 0.1.0. The reported risk is its intended capability to download and execute code from a provided URL.

Who is most exposed?

Users or applications that install and then use otterload to load code from URLs are the relevant exposure group. The package is part of a coordinated campaign of deceptive loader packages, so use in automated workflows or with untrusted URL input is particularly concerning.

MAL-2026-18233: Malicious code in otterload (PyPI)

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this package?

Is there evidence that installing otterload 0.1.0 alone performs malicious activity?

Who is most exposed?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this package?

Is there evidence that installing otterload 0.1.0 alone performs malicious activity?

Who is most exposed?