The minecraftaccfinder package published on PyPI in multiple versions was a malicious package designed to steal credentials and session data from the victim's machine. It exfiltrated browser-stored logins and session cookies, collected the machine's public IP address and account identifiers, and sent this data to a hard-coded webhook. The package also installed persistent malware including a remote access trojan (RAT), keylogger, screenshot capture, and credential theft targeting multiple services such as Gmail, Roblox, Discord, and Minecraft. The package has been removed from PyPI.