The 'voxcpmintel' package on PyPI, version 0.1.0, is a malicious package that pretends to perform legitimate functions but instead installs and runs a coin miner. This behavior classifies it as malware with a focus on unauthorized cryptomining. There is no CVSS score available, and no known exploits in the wild have been reported. The campaign associated with this package is named '2026-10-voxeval'.

The primary impact is unauthorized use of system resources for cryptocurrency mining, which can degrade system performance, increase power consumption, and potentially cause hardware damage over time. There is no indication of data theft or other forms of compromise from the provided data.

Users and administrators should avoid installing or using the 'voxcpmintel' package version 0.1.0 from PyPI. Since this is a malicious package, removal of the package and any associated mining processes is recommended if already installed. No official patch or fix is applicable as this is a malicious package rather than a vulnerability in legitimate software.