MAL-2026-18297 — Malicious code in nebulallm (PyPI)

The nebulallm 1.4.3 package presents itself as an AI API client package but contains malicious code that executes during installation.