If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: oracle-using-macaron (610e92bd25b3f4e4206c9e4e0c321b5120bc85b6a01b289d192f78c53bff9ada)
This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a placeholder for making calls across other malicious packages.