xinference

MAL-2026-3000

PyPImalware4/22/2026
Description

Malicious code in xinference (PyPI)

Indicators of Compromise
SHA256 Hashes (2)
25da806da7e63e3ef29a6bf9a22495ddb5994053824700948e6740be10a2631c
f288797f91465adeae4842f0207774f4449e72e97db4a5294c21e49ad43feb91
Domains (1)
hereisitat.lucyatemysuperbox.space
References (4)
https://github.com/xorbitsai/inference/issues/4828OSVhttps://github.com/xorbitsai/inference/pull/4826OSVhttps://github.com/oaoaoaoaooaoa/inference/blob/f6cf73a913443d8098d7fe2456b54cdc25eb9574/doc/source/gen_docs.pyOSVhttps://bad-packages.kam193.eu/pypi/campaign/2026-04-teampcpOSV
Details
EcosystemPyPI
Attack Typemalware
Published4/22/2026
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001