The spectrova package on PyPI version 0.1.0 is part of a coordinated malicious campaign involving loader packages that download and execute remote malicious scripts. Although the packages themselves do not contain the payload, their intent is clearly malicious as they facilitate execution of harmful code from external sources.