Malicious code in 1h1 (PyPI)

The '1h1' package on PyPI, specifically version 1.0.0, contains malicious code that downloads and executes a remote executable during installation. This behavior classifies it as malware with a campaign linked to infostealing and typosquatting. There is no CVSS score available, and no known exploits in the wild have been reported. The threat is categorized as a malicious package rather than a typical vulnerability.

Installation of the '1h1' package results in execution of malware on the victim's system, potentially leading to compromise such as data theft or unauthorized control. The malicious nature of the package poses a direct risk to users who install it.

Users and organizations should avoid installing the '1h1' package version 1.0.0 from PyPI. Since this is a malicious package rather than a vulnerability in legitimate software, remediation involves removing the package if installed and scanning affected systems for malware. There is no official patch or fix; the best mitigation is to not use this package and rely on trusted sources.