The telegramlite package on PyPI versions 1.0.0 and 1.0.1 contains malicious code that exfiltrates data from the Telegram application to a remote location. This behavior effectively collects Telegram sessions, posing a direct threat to user privacy and security. No install-time or runtime suspicious behaviors were initially detected by automated tools, but manual analysis confirmed the data exfiltration. This package is categorized as malicious with clear intent to steal information.