The PyPI package 'ln9qw38745g' versions 0.1.0 and 0.1.1 contain embedded malicious code. This package overrides the installation process to execute malware, specifically a remote access trojan (RAT), during setup. It is linked to a prior package that switched from benign to malicious executables after a few releases.