MAL-2026-17883 — Malicious code in py-worm (PyPI)

Importing py-worm's agentaix module downloads a mutable Python file from GitHub into a temporary .py file and launches it without a visible console on Windows. The remote file's contents at the time of a victim's import and its actual execution on victim systems have not been established.