The cas-base package on PyPI contains malicious code that downloads and executes remotely stored malware and ensures its persistence. This malicious behavior is not triggered automatically but requires a separate activation. Multiple versions of cas-base are affected by this malicious code.