Malicious code was introduced in elementary-data version 0.23.3 through a compromised GitHub Actions release workflow. The package included a malicious .pth file that automatically executed on Python startup, collected sensitive credentials and system data (such as SSH keys, cloud tokens, .env files, and other secrets), and exfiltrated them to an external server. Upgrade immediately to the clean fixed version 0.23.4.