The pycacheopt package on PyPI contains malicious code hidden in an extension module that can execute arbitrary code under specific conditions. The visible Python code appears benign, but the extension module includes functionality to detect sandbox environments and conceal its malicious behavior. This campaign was first detected by Aikido Security and is categorized as malware due to its clear malicious intent.