MAL-2025-191624

    Dashboard / Malicious Package / MAL-2025-191624

    MAL-2025-191624

    Published: 25 Oct 2025Last Modified: 19 Mar 2026

    Summary: Malicious code in ethaddrlib (PyPI)

    Details: Source: kam193 (9dc2b3682a4269e98a57e232f473846d94e0c74209349b54e1ccc5c669110c47) Package claims to validate mnemonic, a sensitive part of cryptocurrency system. The responsible functions, however, send given data to a remote service, and not even process the response. Thus, the only functionality is exfiltrating sensitive data. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-10-ethaddrlib Reasons (based on the campaign): - crypto-related - exfiltration-crypto

    References: https://bad-packages.kam193.eu/pypi/package/ethaddrlib

    Affected packages

    Package

    Name: ethaddrlib

    Purl: pkg:pypi/ethaddrlib

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    0.1.0
    0.1.1
    MAL-2025-191624 | CVE-DB