The cosmos-cuda package on PyPI, specifically versions 9999.0.0 and 9999.0.1, contains malicious code that executes during installation and import. It collects the installer's hostname, username, and working directory, then exfiltrates this information to a hardcoded external server. The package uses a high version number to override legitimate internal packages, forcing execution of malicious setup.py code. This behavior leads to arbitrary code execution and data exfiltration on affected systems.