The captcha-solve-api package on PyPI contains malicious code that installs persistent telemetry modules executed on every Python interpreter start. These modules collect system information and exfiltrate it to dynamically resolved remote endpoints using DNS TXT record queries to evade detection. The package also downloads and executes remote malicious binaries, using fallback mechanisms including Cloudflare Workers and DNS-based retrieval. The malicious payload persists via a .pth file and overrides the install command to execute during installation. Affected versions include 0.0.1, 8.5.3, and 8.5.4.