The twrap-tool PyPI package version 1.0.0 contains malicious code that fetches and executes arbitrary Python code from a remote repository without verification. The package masquerades as a text-wrapping utility but actually runs attacker-controlled code with the privileges of the caller. This behavior allows remote code execution and potential data exfiltration. The malicious payload is fetched from a mutable tag reference, enabling the attacker to change the executed code at any time after the package is installed. No official patch or fix is currently documented.