The astlsi package on PyPI is a malicious Python library that masquerades as a proxy health-check utility. Its starts() function collects various user files from Android device storage, archives them, and exfiltrates the data to a remote server using a hardcoded Bale bot token and chat ID. The proxy check functionality is a decoy to hide this exfiltration behavior. This package targets Android environments and is designed for unauthorized data theft.