mal-2026-16142: malicious code in a package starts a fork bomb

The package contains malicious code or a dependency that contains malicious code. Importing the module starts a fork bomb, which can destabilize the system.