Malicious Code Vulnerability in aurenatts Package
Summary
MAL-2026-18134: Malicious code in aurenatts (PyPI). Affects aurenatts versions 0.1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The aurenatts package, available on PyPI, is designed for voice synthesis profiles. It allows users to execute code from a specified URL, which raises concerns about its security. The package has been identified as part of a coordinated campaign that aims to load malicious scripts, making it a potential risk for users who rely on it for their applications.
Vulnerability Detail
The vulnerability in the aurenatts package stems from its ability to download and execute remote scripts. This behavior is indicative of a malicious campaign that could lead to the execution of harmful code on the user's system. The specific origin of this vulnerability is linked to a coordinated effort by a source identified as kam193, which has been associated with similar loader packages. The ramifications of this vulnerability include potential data theft, unauthorized access to systems, and the installation of additional malicious software.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
pip uninstall aurenattsIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid using the aurenatts package until a secure version is released. Additionally, consider implementing network security measures to block unauthorized script execution from unknown URLs.
Conclusion
The aurenatts package has been identified as having a serious vulnerability that allows for the execution of remote malicious scripts. Users are advised to update their packages and monitor for any security patches. Utilizing tools like Vulert can help in identifying vulnerabilities in real-time.
See every vulnerability recorded for aurenatts →
FAQ
The aurenatts package is a Python library available on PyPI that is used for voice synthesis profiles, allowing users to execute code from specified URLs.
The vulnerability allows the package to download and execute remote malicious scripts, posing a significant security risk to users.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If you are using the aurenatts package, it is recommended to update to the latest version or temporarily stop using it until a secure version is released.
Vulert monitors and alerts in real-time for open-source vulnerabilities in software by analyzing the Pipfile.lock, providing users with timely information about potential risks.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
