The eth-agent PyPI package versions 1.0.0 and 1.0.1 perform an outbound HTTP fetch to a hardcoded IPFS gateway URL during import, retrieving and executing attacker-controlled Python code via exec(). This code collects sensitive information including cryptocurrency wallet private keys, SSH keys, and dotenv files, exfiltrates them to IPFS, and establishes communication with a command-and-control server to receive further commands. The malicious payload load is silently suppressed to avoid detection. This behavior constitutes a malicious package campaign with clear intent to steal sensitive data and execute remote commands on victim machines.

Users who install and import eth-agent versions 1.0.0 or 1.0.1 risk executing arbitrary attacker-controlled code on their systems. This leads to exfiltration of sensitive files such as cryptocurrency wallet keys, SSH keys, and environment configuration files, potentially resulting in credential theft, unauthorized access, and compromise of cryptocurrency assets. The package also enables remote command execution via a command-and-control infrastructure, increasing the risk of further malicious activity on affected systems.

No official patch or remediation is currently documented for this malicious package. Users should immediately uninstall eth-agent versions 1.0.0 and 1.0.1 if installed. Avoid importing or using this package. Verify package authenticity before installation, especially for packages with names similar to popular libraries (typosquatting). Monitor for any suspicious activity related to this package and consider rotating any potentially exposed credentials or keys. Check PyPI and vendor advisories for updates or official guidance.