MAL-2026-18430 — Malicious code in doctreelstm (PyPI)

Installing the doctreelstm package or importing its module exfiltrates basic information about the host. The package has no other purpose.