If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: oracle-using-macaron (644589899c04664f0638a5eb5d08755b21fddf2d0772259d0f8859a65586be3b)
This package executes an obfuscated payload embedded within a license-checking module.