Malicious code in euler-sdk (PyPI)

The euler-sdk package published on PyPI was found to contain malicious code designed to exfiltrate basic system information from the host machine. The malicious payload is executed during package installation by overriding the install command in setup.py.\n\nThe package has no legitimate functionality beyond the data exfiltration behavior. According to the OpenSSF malicious packages database, this was classified as a pentest-style package with limited harm potential, though it still represents a direct supply chain compromise.\n\nThe malicious code collects basic host data such as IP address and username. Users who installed this package during the window it was available on PyPI were affected.