A malicious PyPI package named 'spellcheckers' impersonates the legitimate 'pyspellchecker' library. It contains obfuscated code that executes upon import, downloading and running a remote-access trojan. This trojan enables attackers to gain full control over the victim's host by executing remote commands. The package versions 1.0.0 through 1.5.0 are affected.