The extera-plugin-runtime package on PyPI contains malicious code designed to exfiltrate sensitive Telegram files. The malicious functionality includes executing remote commands on the victim's machine, though it does not start automatically. This package is part of a campaign with clear malicious intent targeting Telegram data.