Skip to content
Open-Source Registry

pypi / md-to-slides / 0.1.3

md-to-slides 0.1.3

bitbison: no public build not built
processes
361
operations
21K
packages
0
compiler runs
3
connections
1
build time
13s
job time
13s
capture
188 KB
records
32K
bytes / record
5.9
run 9e5661ad-0566-4bf7-8639-735e7b4dd565 · built 2026-10-31 · complete View on PyPI
Reviewed by Bitbison: maliciousmd-to-slides 0.1.1 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

This release did not build; nothing below stands for the package.

Artifact

archive · retained · retained · graph v2
1

Checks

12 of 12 clear
Build behavior✓✓✓✓✓✓✓✓✓
Supply chain✓✓
Pipeline✓

Detections

0

No detections

No abnormal activity detected across 21K flows.

Network

1 peers
  • files.pythonhosted.org:8080 the package manager · python3.14 (md-to-slides) via Package registries profile (pip → files.pythonhosted.org) ecosystem
Versions4RiskVulnsPublished
0.1.3did not build1d ago
0.1.2nonenone1d ago
0.1.1nonenone1d ago
0.1.0nonenone3d ago

Raw data

capture
188 KB
records
31,988
bytes per record
5.9

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-import failure · Generated 2026-10-31 · run 9e5661ad-0566-4bf7-8639-735e7b4dd565

analysis 0.1.0 · 2026-10-30 · a0139f3 · graph v2

md-to-slides 0.1.1 pulls in is-it-ai 0.1.1, which sends a machine fingerprint out and runs the file it returns

maliciousCovers 0.1.0, 0.1.1, 0.1.2 and 0.1.3Reviewed by BitbisonUpdated 2026-11-01

md-to-slides 0.1.1 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

What it does

md-to-slides 0.1.1 declares is-it-ai==0.1.1 as a dependency. Its md-to-slides convert command calls verify() at the start of every conversion.

is-it-ai 0.1.1 presents itself as a library that detects AI agent environments. Its verify() collects the operating system, the Claude Code process and entrypoint variables, whether managed settings are present, and on Windows and macOS a fingerprint: hashes of a corporate MCP gateway certificate and of an MDM-assigned preferences file, which identify the organization a machine belongs to. It posts this to https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/info. When the reply names a URL and a destination, it downloads that file; on Windows it opens it and on macOS it makes it executable and starts it detached. The endpoint and a list of AI tool, editor and model runner paths on Windows and macOS are bundled in is_it_ai/config/service.json.

The other releases of md-to-slides do not pin is-it-ai; they are covers uploaded by the same publisher.

Timeline

  • First release on PyPI: 2026-10-28 22:08 UTC.
  • md-to-slides 0.1.1, the release carrying the code, uploaded 2026-10-31 00:24 UTC.
  • Reported to the OpenSSF malicious packages database as MAL-2026-18428: 2026-10-31 12:57 UTC, 12 hours after that release was published.
  • Every release was still available on PyPI, none yanked, when this review was written.

Indicators

hosts
cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app
requests
https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/infohttps://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/status
packages
pypi:is-it-ai==0.1.1

Examined

0.1.1
sha256:49f4386a2140438f19821d6eaf94470bf664236a251a8ff21f7ded06af4651aa

Links