If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: oracle-using-macaron (6fd0fbf90d161b67f6df5c7e057b6ac660066232b4565e893e9e72bc43c86a1b)
This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a placeholder for making calls across other malicious packages.