The metrio package versions 999.0.0, 1000.0.0, and 1001.0.0 execute code at install time (via setup.py) and import time (via metrio/__init__.py) that reads the local hostname, hex-encodes it, and sends it as a subdomain in DNS and HTTP requests to an attacker-controlled domain. This behavior is intended as a dependency confusion proof-of-concept to confirm that the internal package name resolves to the public PyPI index and to collect hostnames from affected systems. The package has no other functionality beyond this exfiltration.

Installing or importing the affected metrio package versions results in disclosure of the local machine's hostname to a third party. This can confirm to an attacker that the internal package name resolves externally and that the host has installed or imported the malicious package. There is no indication of further payloads or system compromise beyond this information leakage.

No official patch or remediation is indicated. Users should avoid installing or importing the metrio package versions 999.0.0, 1000.0.0, and 1001.0.0 from PyPI. Since this is a proof-of-concept malicious package designed for dependency confusion testing, verifying internal package resolution policies and restricting public package resolution for internal package names can mitigate risk.