MAL-2026-18326 — Malicious code in changes-lxc-wrapper (PyPI)

Installing the package or importing the module exfiltrates basic information about the host, such as its IP address or username. The package has no other purpose, and the source describes the risk as limited.