The PyPI package 'infra-libs' version 99.99.99 performs unauthorized DNS exfiltration of the installer's hostname during installation and import. It constructs DNS queries embedding the hostname to a suspicious external domain unrelated to the publisher, with no legitimate functionality justifying this behavior. This package name is confusable with internal infrastructure libraries, increasing risk of dependency confusion attacks.