The paysafe-api package version 1.0.0 on PyPI contains malicious code that exfiltrates basic data and parts of sensitive environment variables to a remote host. It employs obfuscation techniques and detects sandbox environments to evade analysis. This package is involved in a dependency confusion campaign and hides malicious actions within its library usage.