The pydanticc package on PyPI is a malicious typosquat of the popular pydantic library. During installation, it executes obfuscated code that downloads and runs a remote executable from an unrelated personal GitHub account. The package contains no legitimate functionality and acts as an install-time dropper, enabling arbitrary remote code execution on the installer's system. It is known to exfiltrate cryptocurrency wallet data and potentially other sensitive information.