The spaysdatarbx package on PyPI is a malicious Windows infostealer disguised as a Roblox DataStore library. Upon import, it silently executes code that steals Roblox session cookies and browser-stored Discord tokens by decrypting them using Windows DPAPI and sends this data to a hardcoded Discord webhook. It also forcibly terminates Discord to access locked tokens and establishes persistence by copying itself to the user's AppData folder and creating a registry autostart entry. The package contains no legitimate Roblox DataStore functionality and is purely designed for credential theft and persistence.