// pypi package

eplang

EPL - English Programming Language: write code in plain English. Build apps, web servers, and more.

pypi.org tarball repo

versions

first publish

2026-04-03

tarball

975,279 B

AUTO-PUBLISHED·1 version indexed·latest published 2026-05-26

// exfil path

what is read → where it ships

steals

● GitHub PAT
● AWS keys
● Chromium logins
○ fs recursive read
○ clipboard
○ home dir
○ system info

sends to

(no destination string extracted — payload may be dynamic / obfuscated)

evidence in excerpt

> import urllib.error
> import urllib.request
> OLLAMA_HOST = 'http://localhost:11434'
> GROQ_BASE_URL = 'https://api.groq.com/openai/v1'
> GEMINI_BASE_URL = 'https://generativelanguage.googleapis.com/v1beta'

→ view full payload

// offending code· @8.0.0· 3 files flagged

llm: benign · 0.85

→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 2 other host(s).

@8.0.0·2026-05-26·AUTO-PUBLISHED
heuristic 75/100
static flags 19
llm benign (0.85) via ollama
pypi-sdist-setup-pypypi-no-authormature-packagehas-source-repoosv-flagged:MAL-2026-4748child-process-spawnfs-recursive-readpy-pip-install-runtimepy-urllib-requestclipboard-accessreads-github-tokensreads-env-varsreads-homedirpy-socket-connectreads-aws-credsreads-chromium-credspy-sys-platform-branchbase64-decode

--- eplang-8.0.0/main.py (excerpt) --- """ EPL - English Programming Language (v7.0) Production-ready command-line entry point. Usage: python main.py <file.epl> Run an EPL file (interpret) python main.py compile <file.epl> Compile to native executable python main.py ir <file.epl> Show LLVM IR (debug) python main.py js <file.epl> Transpile to JavaScript python main.py node <file.epl> Transpile to Node.js python main.py kotlin <file.epl> Transpile to Kotlin python main.py python <file.epl> Transpile to Python python main.py android <file.epl> Generate Android project python main.py playground Start Web Playground IDE python main.py notebook Start Notebook (Jupyter-like) python main.py blocks Start Visual Block Editor python main.py copilot AI Copilot (describe -> code) python main.py gui <file.epl> Run with GUI support python main.py gen <description> AI-generate EPL code from description python main.py explain <file.epl> AI-explain what code does python main.py init Initialize new project python main.py install <package> Install a package python main.py gitinstall <owner/repo> Install/save a GitHub package dependency python main.py gitremove <name> Remove a GitHub dependency declaration python main.py gitdeps List declared GitH --- eplang-8.0.0/epl/ai.py (excerpt) --- """ EPL AI Module (v1.2) Integration with Ollama for local AI capabilities. Supports: chat, generate, code assist, error explanation, code generation, embeddings, streaming, and custom EPL-trained model creation. """ import json import urllib.error import urllib.request # ─── Configuration ─────────────────────────────────────── OLLAMA_HOST = 'http://localhost:11434' DEFAULT_MODEL = 'llama3.2' # ─── Cloud Provider Configuration ──────────────────────── CLOUD_PROVIDER = None # 'gemini', 'groq', or None (use Ollama) CLOUD_API_KEY = None CLOUD_MODEL = None # Override cloud model (auto-selected if None) GROQ_BASE_URL = 'https://api.groq.com/openai/v1' GROQ_DEFAULT_MODEL = 'llama-3.3-70b-versatile' GEMINI_BASE_URL = 'https://generativelanguage.googleapis.com/v1beta' GEMINI_DEFAULT_MODEL = 'gemini-2.0-flash' # Fast, free, works globally # Available free Groq models GROQ_MODELS = [ ('llama-3.3-70b-versatile', 'Llama 3.3 70B — best quality'), ('llama-3.1-8b-instant', 'Llama 3.1 8B — fastest'), ('gemma2-9b-it', 'Gemma 2 9B — Google, good quality'), ('mixtral-8x7b-32768', 'Mixtral 8x7B — 32K context'), ] # Available free Gemini models GEMINI_MODELS = [ ('gemini-2.0-flash', 'Gemini 2.0 Flash — fast, recommended'), ('gemini-2.0-flash-lite', 'Gemini 2.0 Flash Lite — fastest'), ('gemini-1.5-flash', 'Gemini 1.5 Flash — stable'), ('gemini-1.5-pro', 'Gemini 1.5 Pro — best quality'), ] _CONFIG_PATH = None # Set lazily def _get_config_path(): "" --- eplang-8.0.0/epl/async_io.py (excerpt) --- """ EPL Async I/O Event Loop v4.0 Production-grade asynchronous I/O with: - Event loop (asyncio-backed) - Async/await coroutine support - Async timers, intervals - Async file I/O - Async HTTP client - Channel-based communication (Go-style) - Task groups for structured concurrency """ import asyncio import threading import time from concurrent.futures import ThreadPoolExecutor # ═══════════════════════════════════════════════════════════ # Event Loop Singleton # ═══════════════════════════════════════════════════════════ class EPLEventLoop: """Singleton event loop for EPL async operations.""" _instance = None _lock = threading.Lock() def __new__(cls): if cls._instance is None: with cls._lock: if cls._instance is None: cls._instance = super().__new__(cls) cls._instance._initialized = False return cls._instance def __init__(self): if self._initialized: return self._loop = None self._thread = None self._executor = ThreadPoolExecutor(max_workers=16) self._tasks = {} self._channels = {} self._initialized = True def _ensure_loop(self): """Start the event loop in a background thread if not running.""" if self._loop is None or self._loop.is_closed(): self._loop = asyncio.new_event_loop() self._thread = threading.Thread(target=self._run_loop, daemon=T