The PyPI package 'yeahmankema' versions 1.0.0 and 1.0.1 contain malicious code that exfiltrates screenshots and network information to a hardcoded target. This package exhibits spyware-like behavior with obfuscation techniques and is part of a campaign identified as 2026-05-crayrandomiz.