pypi
Malicious ether-account @0.14.0b1
Vulnerability report · Last retrieved from osv.dev June 23, 2026 at 4:30 AM UTC
OSV ID
MAL-2026-2404
Ecosystem
pypi
Summary
Clones of a legitimate library. During processing the private key, it's getting exfiltrated. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-04-ether-account Reasons (based on the campaign): - clones-real-package - action-hidden-in-lib-usage - crypto-related - exfiltration-crypto - typosquatting
Source: kam193 (e807b32b64c457df7e89ee3ba1e8e25fe779ccff08b1da00800b705ff833f42e)
Protect your entire dependency tree
Scan your lock files automatically on every PR. Block malicious packages before they reach production.