The 'telegram-lite-grabber' package on PyPI version 1.0.0 is identified as malicious software designed to exfiltrate data from the Telegram application, specifically targeting Telegram sessions. Although automated scans did not detect install-time or import-time harmful code, the package's behavior includes collecting and sending Telegram session data to a remote location. This package is categorized as malicious due to its intent to steal information. There is no known patch or remediation available, and no exploits have been reported in the wild to date.