The paysafe-kyc package version 1.0.0 on PyPI contains malicious code that exfiltrates basic data and parts of sensitive environment variables to a remote host. The malicious code includes sandbox detection and obfuscation techniques to evade analysis. This package is part of a campaign involving dependency confusion and hidden malicious actions within library usage.