CERT24mal-2026-16125: package containing malicious code
According to the source, starting with version 0.1.1, the package contains an infostealer that attempts to collect and exfiltrate sensitive data during import, including browser data, sensitive files, and cloud credentials. In the analyzed versions, coding errors effectively disarmed the functionality.