The PyPI package 'browser-use-headless' version 0.1.4 is a malicious typosquat clone of a legitimate browser automation helper. It contains hidden code that steals sensitive credentials and environment variables from the host system, including AWS, SSH, GCP, Azure, Kubernetes, Docker, Git, npm, and other secret files. The stolen data is base64-encoded and exfiltrated via HTTP POST to a hardcoded external endpoint unrelated to the package's advertised functionality. This credential-stealing behavior is deliberately obscured within the code to evade detection.