The 'ml-core-airflow-auth' PyPI package (version 0.0.1) includes malicious functionality disguised as a telemetry module. It attempts to download a malicious executable from multiple sources, first via Cloudflare Workers and then via DNS TXT records from specific domains, reconstructing the executable in parts. The binary is executed and then deleted to evade detection. Persistence is achieved by abusing Python's .pth files to run the malicious code on each Python startup. Additionally, the package overrides the setup.py install command to run malicious code during installation and exfiltrates basic system information such as IP and username. This campaign is identified as malicious with clear intent to maintain persistence and cover tracks.

The malicious package can execute arbitrary code on the affected system, leading to potential compromise. It exfiltrates basic system information, establishes persistence on the host, and removes traces of the downloaded executable to evade detection. The overriding of the install command means the malicious code runs during package installation, increasing the risk of infection. Although no known exploits in the wild are reported, the capability to download and execute arbitrary binaries poses a significant security risk.

No official patch or fix is available for this malicious package. The best mitigation is to avoid installing or using 'ml-core-airflow-auth' version 0.0.1 from PyPI. Security teams should audit their environments for the presence of this package and remove it if found. Monitor for suspicious .pth files that could indicate persistence mechanisms. Since this is a malicious package rather than a vulnerability in legitimate software, remediation involves removing the package and any associated malicious artifacts.