During installation, package exfiltrates basic info and all environmental variables.

---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-07-ml-shared

Reasons (based on the campaign):

• exfiltration-env-variables

• The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk.