The PyPI package 'idnna' is a malicious typosquatting package impersonating the popular 'idna' library. During installation, it executes obfuscated code that downloads and runs a remote binary from an unrelated GitHub repository. This binary is executed with elevated permissions and is reported to exfiltrate cryptocurrency wallet data and potentially other sensitive information. The malicious behavior triggers automatically upon 'pip install' of affected versions.