A malicious code campaign has been identified in the extrahtml package on the PyPI repository. The malicious code, embedded in a YAML loader dependency, executes remote code by downloading and running a script from a provided file. This campaign has malicious intent, similar to infostealers, and is categorized as a clear threat. The malicious code is intentionally included in the package, and its purpose is to execute remote code, making it a serious security concern for developers and users of the extrahtml package.