Malicious code in trtllm-subdir-test (PyPI)

The trtllm-subdir-test package published on PyPI contained malicious code designed to exfiltrate basic system information from the host upon installation or module import. The package has no legitimate functionality beyond this data exfiltration.\n\nThe attack was implemented by overriding the install command in setup.py to execute malicious code during the package installation process. This ensures the payload runs automatically when users install the package via pip.\n\nThe malicious package was identified and attributed to the OpenSSF's malicious-packages repository (MAL-2026-11426). The incident was categorized as a typical pentest-style package with limited harm potential, though it demonstrates the risk of installing untrusted packages from public repositories.\n\nUsers who installed this package should assume their basic system information (IP address, username) may have been exfiltrated and should monitor for any suspicious activity.