Malicious code in aanthropic (PyPI)

The aanthropic PyPI package version 1.0.0 is a malicious package that, upon installation, downloads and executes a remote executable malware. This behavior classifies it as part of a malicious campaign involving typosquatting to deceive users into installing malware disguised as a legitimate package.

Users installing the aanthropic package version 1.0.0 risk executing malware on their systems, which could lead to compromise depending on the malware's capabilities. The malicious code executes automatically during installation, posing a direct threat to system security.

Avoid installing the aanthropic package version 1.0.0 from PyPI. Verify package names carefully to avoid typosquatting traps. Since this is a malicious package rather than a vulnerability in legitimate software, remediation involves not using or removing the package if installed.