ethrpc-accounts @0.9.2

Summary

This package is a clone of legitimate eth-accounts. The malicious code is hidden in the dependency, ethrpc-keys, which exfiltrates private keys. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-02-old-ethrpc-keys Reasons (based on the campaign): - clones-real-package - exfiltration-crypto - crypto-related - action-hidden-in-lib-usage - The malicious code is intentionally included in a dependency of the package

Source: kam193 (6372ce82342ae30022a83501fc348d1c63ec3cb27b19dba0678430efdfeeb077)