The pyjstat-smooth package on PyPI contains malicious code designed to exfiltrate specific files from a user's machine. The file paths targeted suggest the malware was intended for use in a Capture The Flag (CTF)-like environment. This package is a clone of a legitimate package but includes obfuscated code with clear malicious intent to steal information.