Security News > 2025 > March > Ethereum private key stealer on PyPI downloaded over 1,000 times

Ethereum private key stealer on PyPI downloaded over 1,000 times
2025-03-06 17:11

A malicious Python Package Index (PyPI) package named "set-utils" has been stealing Ethereum private keys through intercepted wallet creation functions and exfiltrating them via the Polygon blockchain. [...]


News URL

https://www.bleepingcomputer.com/news/security/ethereum-private-key-stealer-on-pypi-downloaded-over-1-000-times/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Ethereum 9 0 8 23 2 33
Pypi 15 0 0 1 15 16