MAL-2026-18299 — Malicious code in claudeopuseni (PyPI)

The claudeopuseni PyPI package contains malicious code. On import, it loads and executes an encrypted remote payload or a bundled fallback payload with the importing user’s privileges and includes sandbox and CI-environment detection logic. During installation, it retrieves a Python application hidden in an image together with a native extension module containing an obfuscated infostealer.