The pyqt6darktheme package at version 0.1.0 is a malicious PyPI package that downloads and runs a remote executable. This executable subsequently downloads more executables and starts coin mining operations on the affected system. The campaign associated with this package is categorized as malicious, involving malware distribution and cryptomining activities. There is no CVSS score available, and no known exploits in the wild have been reported. The package is not a cloud service, and no official patch or remediation guidance is provided.

Systems that install and run pyqt6darktheme version 0.1.0 are at risk of executing unauthorized remote code, which leads to further malware downloads and unauthorized cryptocurrency mining. This can result in resource exhaustion, degraded system performance, and potential compromise of system integrity.

No official patch or remediation is currently documented. Users should avoid installing or using pyqt6darktheme version 0.1.0. Remove the package if already installed and scan affected systems for unauthorized executables and cryptomining processes. Monitor for suspicious network activity related to remote executable downloads. Patch status is not yet confirmed — check the vendor advisory or PyPI security advisories for updates.