The discord-telemetry PyPI package versions 0.1.0 to 0.1.5 include malicious code that overrides the standard installation process. During installation, it downloads and executes a remote executable, which is indicative of malware activity. Earlier versions also contained local tests of malicious behavior. This package is identified as part of a malicious campaign (2026-07-discord-telemetry) and is categorized as malware with clear intent to compromise systems. There is no CVSS score or known exploits in the wild reported. No vendor advisory or patch information is available.

Installation of affected versions results in execution of malicious code that downloads and runs a remote executable, potentially compromising the host system. This behavior can lead to unauthorized access, data theft, or other malware-related impacts. Since the malicious code executes during installation, any environment where these versions are installed is at risk.

Avoid installing the discord-telemetry package versions 0.1.0 through 0.1.5. Remove any existing installations of these versions. Since no official patch or remediation is available, rely on blocking or removing the package from your environment. Monitor package sources and use trusted repositories. Consider using package integrity verification tools to detect malicious packages.