The requests-cache-utils package version 1.0.0 on PyPI contains malicious code that executes during installation. This code downloads and runs an infostealer designed to exfiltrate browser data. The package overrides the standard install command to perform these malicious actions.