Code execution via malicious request dependency

Malicious dependency execution in AAmiles 0.1.0 allows attackers to run code and access sensitive data through the request package. The package declares request as a dependency, and installing AAmiles 0.1.0 from a mirror that still serves that removed dependency installs the malicious package; public sources do not disclose its internal payload or execution path. Installation of the affected release and retrieval of the malicious dependency are required, after which the reported consequences include exposure of user information and digital-currency keys and privilege escalation.