Skip to content
Open-Source Registry

pypi / multi-convert / 0.1.1

multi-convert 0.1.1

bitbison: flagged, behavior flagged, dependencies clean, posture not checked, pipeline clean, 1 of 1 jobs captured RisknoneVulnsnone
processes
435
operations
57K
packages
0
compiler runs
3
connections
1
build time
56s
job time
56s
capture
654 KB
records
96K
bytes / record
6.8
run 90954003-dce6-4f3d-afee-1f606487b326 · built 2026-11-01 · complete View on PyPI
Reviewed by Bitbison: maliciousmulti-convert 0.1.4 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

Artifact

archive · retained · retained · graph v2
1

Checks

12 of 12 clear
Build behavior✓✓✓✓✓✓✓✓✓
Supply chain✓✓
Pipeline✓

Detections

0

No detections

No abnormal activity detected across 57K flows.

Network

1 peers
  • files.pythonhosted.org:8080 the package manager · python3.14 (multi-convert) via Package registries profile (pip → files.pythonhosted.org) ecosystem
Versions6RiskVulnsPublished
0.1.5did not build1d ago
0.1.4nonenone1d ago
0.1.3nonenone2026-09-10
0.1.2nonenone2026-09-09
0.1.1nonenone2026-09-09
0.1.0nonenone2026-09-09

Raw data

capture
654 KB
records
96,329
bytes per record
6.8

Loading a sample of the capture

Want to see more? E-mail us at hello@bitbison.io about your use case.

1 of 1 jobs captured: build-import success · Generated 2026-11-01 · run 90954003-dce6-4f3d-afee-1f606487b326

analysis 0.1.0 · 2026-11-01 · af5af45 · graph v2

multi-convert 0.1.4 pulls in is-it-ai 0.1.1, which sends a machine fingerprint out and runs the file it returns

maliciousCovers 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4 and 0.1.5Reviewed by BitbisonUpdated 2026-11-01

multi-convert 0.1.4 depends on is-it-ai==0.1.1 and calls its verify() from its own command. That code posts an environment and organization fingerprint to a Cloud Run endpoint and runs a file the server returns on Windows and macOS. The other releases are covers from the same publisher.

What it does

multi-convert 0.1.4 declares is-it-ai==0.1.1 as a dependency. Its multi-convert command calls verify() while validating the input and output formats of every conversion.

is-it-ai 0.1.1 presents itself as a library that detects AI agent environments. Its verify() collects the operating system, the Claude Code process and entrypoint variables, whether managed settings are present, and on Windows and macOS a fingerprint: hashes of a corporate MCP gateway certificate and of an MDM-assigned preferences file, which identify the organization a machine belongs to. It posts this to https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/info. When the reply names a URL and a destination, it downloads that file; on Windows it opens it and on macOS it makes it executable and starts it detached. The endpoint and a list of AI tool, editor and model runner paths on Windows and macOS are bundled in is_it_ai/config/service.json.

The other releases of multi-convert do not pin is-it-ai; they are covers uploaded by the same publisher.

Timeline

  • First release on PyPI: 2026-09-09 20:38 UTC.
  • multi-convert 0.1.4, the release carrying the code, uploaded 2026-10-31 00:32 UTC.
  • Reported to the OpenSSF malicious packages database as MAL-2026-18429: 2026-10-31 13:01 UTC, 12 hours after that release was published.
  • Every release was still available on PyPI, none yanked, when this review was written.

Indicators

hosts
cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app
requests
https://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/session/infohttps://cdn-9zp0pi12ck0dmfig-3ozmpyh7ja-uc.a.run.app/v1/status
packages
pypi:is-it-ai==0.1.1

Examined

0.1.4
sha256:22b4bef19eb845c46db933c3f5ce2ab5b1eec29b4849b414fbc1831524d024b9

Links