Malicious code in tallyboxlite (PyPI)

The tallyboxlite PyPI package version 1.0 is a malicious package that executes code during installation by overriding the setup.py install command. This code collects basic system information, including IP address and username, and exfiltrates it. The package serves no other purpose and is categorized as a low-harm potential pentest-like malicious package.

Installing or importing tallyboxlite version 1.0 results in unauthorized exfiltration of basic system information such as IP address and username. This compromises host privacy and may aid attackers in reconnaissance but does not indicate further exploitation or system compromise based on available data.

Avoid installing or importing the tallyboxlite package version 1.0 from PyPI. Since no patch or remediation is provided, users should remove the package if installed and verify no unauthorized data exfiltration occurred. Use trusted sources and verify package integrity before installation.