Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/08/05 9:31 p.m.•19 views

Malicious Package

Overview eth-account-wallet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/05 9:31 p.m.•3 views

Malicious code in eth-account-wallet (PyPI)

Source: kam193 4e0a297fd6a2bfc0e15f9aac09c92768a4725458ad282594e97ec15bb3fa8c5f During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, li...

6.2AI score
SaveExploits0References5Affected Software1
osv_mal
osv_mal
•added 2026/08/05 5:48 p.m.•42 views

MAL-2026-13372 Malicious code in eth-account-wallet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3337915e7c14a0ceb6743d1edf2e607fd7926656b49cdd041d7b161b718178 eth-account-wallet 0.11.2 is a typosquat of the eth-account PyPI package. Its setup.py installs a custom install cmdclass PI that, on pip install,...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder