The crypto-kit-pro package versions 1.0.0 and 1.0.1 on PyPI contain malicious code that scans the filesystem for BIP-39 seed phrases and private key data, then exfiltrates this sensitive information. This behavior classifies it as malware with clear intent to steal cryptocurrency credentials.