The metoopro package on PyPI version 1.0.2 contains malicious code designed to run on Android devices. It masquerades as an AI agent but downloads a remote executable upon import. During use, it silently exfiltrates sensitive data such as text messages and contacts.