During installation, if run under a specific username, the package downloads and installs two executables identified as backdoors trojans.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-03-thisismytest123

Reasons (based on the campaign):

• Downloads and executes a remote executable.

• backdoor

• malware

The OpenSSF Package Analysis project identified 'zzzzthisisitwantsafecheckitzzzz' @ 1.0.0 (pypi) as malicious.

It is considered malicious because:

• The package executes one or more commands associated with malicious behavior.

---

Credit: OpenSSF (source)