The hookgantry 0.1.0 package on PyPI is part of a malicious campaign involving loader packages that execute code from remote URLs. Although the package itself does not contain the malicious payload, it is designed to download and run remote malicious scripts, indicating coordinated malicious intent. No installer-side harm or credential harvesting was detected during scanning, but the package facilitates executing potentially harmful code.