The paysafe-payments package version 1.0.0 on PyPI contains malicious code that exfiltrates basic data and sensitive environment variables to a remote host. The malicious code includes obfuscation techniques and sandbox detection to evade analysis. This package is part of a known malicious campaign involving dependency confusion and hidden malicious actions within library usage.