The PyPI package test-workalendar-internal versions 0.0.1, 0.0.2, and 0.0.3 contains malicious code that executes during installation. It installs a web terminal bound to localhost and exposes it via a Cloudflare tunnel, sending access credentials to an attacker-controlled server. This creates a remote shell backdoor on the installer's machine.