The PyPI package 'solidity-dev' version 1.3.0 contains malicious code that drops and executes a base64-encoded Linux ELF binary upon import. This binary steals cryptocurrency wallet data from various local keystores and browser wallet extensions, encrypts the data, and exfiltrates it to attacker-controlled file-sharing and IPFS services. It also establishes persistence by installing a cron job to periodically re-execute the malicious payload. The package falsely advertises Solidity development helpers but contains no legitimate Solidity-related code.