uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would execute
on import of the module and download a script from a remote URL,
and would then execute the downloaded script in a thread.
The downloaded script would harvest system information
and `POST` the information to another remote URL.
This code was found in the PyPI release artifacts and was not present
in the public GitHub repository.