The fast-hashes package version 0.1.0 on PyPI contains malicious code that executes during installation. The setup.py file overrides the install command to decode and execute a base64-encoded payload, which downloads and runs an unverified binary from a third-party GitHub repository. This behavior enables arbitrary code execution on the installer's host. The package is a typosquatting attempt mimicking a popular library and is designed to exfiltrate cryptocurrency wallet data and potentially other sensitive information.