Skip to content
Open-Source Registry

pypi / md-to-slides / 0.1.1

md-to-slides 0.1.1

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RisknoneVulnsnone
processes
408
operations
24K
packages
0
compiler runs
3
connections
1
build time
17s
job time
17s
capture
202 KB
records
36K
bytes / record
5.6
run 4c5200e9-3252-41d2-b4e9-d096af2af70d · built 2026-10-31 · complete View on PyPI
Reviewed by Bitbison: maliciousmd-to-slides 0.1.1 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

Artifact

archive · retained · retained · graph v2
1

Checks

12 of 12 clear
Build behavior✓✓✓✓✓✓✓✓✓
Supply chain✓✓
Pipeline✓

Detections

0

No detections

No abnormal activity detected across 24K flows.

Network

1 peers
  • files.pythonhosted.org:8080 the package manager · python3.14 (md-to-slides) via Package registries profile (pip → files.pythonhosted.org) ecosystem
Versions4RiskVulnsPublished
0.1.3did not build1d ago
0.1.2nonenone1d ago
0.1.1nonenone1d ago
0.1.0nonenone3d ago

Raw data

capture
202 KB
records
35,766
bytes per record
5.6

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-import success · Generated 2026-10-31 · run 4c5200e9-3252-41d2-b4e9-d096af2af70d

analysis 0.1.0 · 2026-10-30 · a0139f3 · graph v2

md-to-slides 0.1.1 pulls in is-it-ai 0.1.1, which sends a machine fingerprint out and runs the file it returns

maliciousCovers 0.1.0, 0.1.1, 0.1.2 and 0.1.3Reviewed by BitbisonUpdated 2026-11-01

md-to-slides 0.1.1 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

What it does

md-to-slides 0.1.1 declares is-it-ai==0.1.1 as a dependency. Its md-to-slides convert command calls verify() at the start of every conversion.

is-it-ai 0.1.1 presents itself as a library that detects AI agent environments. Its verify() collects the operating system, the Claude Code process and entrypoint variables, whether managed settings are present, and on Windows and macOS a fingerprint: hashes of a corporate MCP gateway certificate and of an MDM-assigned preferences file, which identify the organization a machine belongs to. It posts this to https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/info. When the reply names a URL and a destination, it downloads that file; on Windows it opens it and on macOS it makes it executable and starts it detached. The endpoint and a list of AI tool, editor and model runner paths on Windows and macOS are bundled in is_it_ai/config/service.json.

The other releases of md-to-slides do not pin is-it-ai; they are covers uploaded by the same publisher.

Timeline

  • First release on PyPI: 2026-10-28 22:08 UTC.
  • md-to-slides 0.1.1, the release carrying the code, uploaded 2026-10-31 00:24 UTC.
  • Reported to the OpenSSF malicious packages database as MAL-2026-18428: 2026-10-31 12:57 UTC, 12 hours after that release was published.
  • Every release was still available on PyPI, none yanked, when this review was written.

Indicators

hosts
cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app
requests
https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/infohttps://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/status
packages
pypi:is-it-ai==0.1.1

Examined

0.1.1
sha256:49f4386a2140438f19821d6eaf94470bf664236a251a8ff21f7ded06af4651aa

Links