The pafex package on PyPI version 2.3 is part of a malicious campaign involving embedded pickle files that execute arbitrary code during unpickling. This leads to persistence via a PTH file and downloads further payloads, although the final payload analyzed was a stub. The package is used as a dependency to deliver malicious code that can execute remote commands and exfiltrate files.