The mlflow-otel-instrumentor PyPI package masquerades as an AWS-supported tool but executes a malicious payload during installation. A custom setuptools install command writes a shell script that sleeps briefly, then downloads an ELF binary from an unrelated host, makes it executable, and runs it detached in the background as /tmp/systemd-helper. The payload is unsigned and unrelated to the advertised functionality. Analysis indicates intentions for persistence via systemd services, network scanning, worm-like propagation, and cryptocurrency mining. This campaign is identified as 2026-08-mlflow-otel-instrumentor and is categorized as a malicious package with typosquatting characteristics.

Installing this package results in execution of an unsigned, non-publisher ELF binary running persistently on the host. The payload may perform unauthorized network scanning, attempt to propagate like a worm, establish persistence mechanisms, and mine cryptocurrency, potentially degrading system performance and compromising security.

Do not install the mlflow-otel-instrumentor package version 1.1.0 from PyPI. Remove any installations of this package immediately and scan affected systems for the presence of the /tmp/systemd-helper process or related artifacts. Since this is a malicious package impersonating AWS, verify package authenticity before installation. There is no official patch or fix; remediation involves removal and system cleanup.