The wacve-utils package version 1.0.7 on PyPI contains malicious encrypted code functioning as an infostealer targeting Linux and Android (via Termux). It collects files, browser data, and text messages, then exfiltrates this information to a Telegram channel. The package also downloads and executes remote malicious scripts and uses obfuscation techniques to evade detection.