ethaddrlib

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (9dc2b3682a4269e98a57e232f473846d94e0c74209349b54e1ccc5c669110c47)
Package claims to validate mnemonic, a sensitive part of cryptocurrency system. The responsible functions, however, send given data to a remote service, and not even process the response. Thus, the only functionality is exfiltrating sensitive data.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2025-10-ethaddrlib


Reasons (based on the campaign):


 - crypto-related


 - exfiltration-crypto

Compromised versions (2)

• 0.1.0
• 0.1.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.