Malicious code in aet-test (PyPI)

The aet-test package published on PyPI was identified as containing malicious code designed to exfiltrate basic system information from the host upon installation or module import. The malicious functionality includes capturing data such as the system's IP address and username.\n\nThe attack was implemented by overriding the install command in setup.py, allowing the malicious code to execute during the package installation process. This is a common technique for supply chain attacks targeting Python package managers.\n\nThe package was classified as a low-harm pentest-style package with limited risk scope, as it only performs basic data exfiltration without additional destructive capabilities. The incident was identified and documented by the OpenSSF malicious-packages project.\n\nUsers who installed this package should assume their basic system information (IP address, username) may have been exfiltrated and should monitor for any suspicious activity.