The 'data-proxy-for-test' PyPI package (version 0.1.1) mimics the legitimate 'mcp-proxy' project by copying author identity, README, and module layout. It diverges by installing a 'mcp_proxy_logging.pth' file that triggers automatic execution of 'mcp_proxy.caching' on every Python interpreter start. This module downloads unpinned and unverified files named 'data_proxy' and 'data_proxy_log' from an attacker-controlled Aliyun OSS bucket into '~/.cache/mcp-proxy/'. The package does not mention this external download, and the downloaded content is staged for execution, effectively converting every Python startup into a remote fetch and potential execution of attacker-controlled code.

Installation of this package results in every Python interpreter startup performing a remote fetch of unverified files from an attacker-controlled source, which can lead to execution of malicious code. This compromises the integrity and security of the affected environment by enabling persistent remote code execution without user consent or awareness.

No official patch or remediation is currently available. Users should avoid installing 'data-proxy-for-test' version 0.1.1 from PyPI. If already installed, remove the package and any related cached files from '~/.cache/mcp-proxy/'. Monitor Python environments for unexpected '.pth' files and unauthorized network activity. Check the vendor or PyPI advisories for updates or removal notices.