The dlocal-cli package on PyPI, versions 99.0.0 through 99.0.3, contains malicious code that executes during installation. It overrides the install command in setup.py to run commands associated with malicious behavior, including exfiltration of environment variables and generic data. This package is identified as a typosquatting attempt with clear malicious intent.