The django-bkvision PyPI package version 1.2.0 is a malicious package that executes code during installation by overriding the install command in setup.py. This code collects and exfiltrates basic system information including the host's IP address and username. The package serves no legitimate function and is classified as a probable pentest or low-harm malicious package designed to gather basic host data.

Installing or importing the django-bkvision package version 1.2.0 results in unauthorized exfiltration of basic host information such as IP address and username. This could lead to privacy violations and potential reconnaissance for further attacks. There is no indication of more severe impacts or widespread exploitation in the wild.

No official patch or remediation is currently available. Users should avoid installing or importing django-bkvision version 1.2.0. Since this is a malicious package on PyPI, verifying package authenticity before installation is recommended. Remove any installations of this package and monitor for any unauthorized data exfiltration. Patch status is not yet confirmed — check the vendor or PyPI advisory for current remediation guidance.