The python-bittensor-config-v2 package version 1.1.0 on PyPI contains malicious code that silently adds a new authorized SSH key during installation or import. This behavior is linked to the 2026-05-ninja-ssh-proto campaign, which is known for backdoor and obfuscation techniques. There is no built-in cryptocurrency exfiltration functionality identified in this package.