The cdktn-provider-azurerm package on PyPI is a malicious package impersonating the legitimate HashiCorp cdktf-provider-azurerm by using a single-character substitution in its name and mimicking branding. It forces installation of a malicious base package 'cdktn' that executes attacker-controlled code during import, potentially compromising the installer's Python environment. This package version 17.0.0 is affected. There is no CVSS score or known exploits in the wild reported.