MalwarePublished 12 Jul 2026

eth-agent (PyPI) · Malicious Code

Affects eth-agentSource GCVE Database

Malicious package : remove eth-agent and rotate any secrets on hosts that installed it.

Data as of 13 Jul 2026, 09:57 UTC

Classification

Malicious package

Published to PyPI · OSV MAL-2026-10195

What to do

Remove eth-agent from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
PyPIeth-agent	Affected =1.0.0 =1.0.1	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The eth-agent package on PyPI versions 1.0.0 and 1.0.1 contains malicious code that executes a remote script fetched from an IPFS gateway during import. This script collects sensitive files such as cryptocurrency wallet keys, SSH keys, and dotenv files, then uploads them to IPFS and communicates with a command-and-control server for further instructions. The malicious behavior is hidden by suppressing errors during the fetch-and-execute process, making it opaque to the user. This package is a typosquatting attempt unrelated to its stated Ethereum RPC helper purpose.

Impact

Users who install and import eth-agent versions 1.0.0 or 1.0.1 risk executing arbitrary attacker-controlled code on their systems. This leads to exfiltration of sensitive files such as cryptocurrency wallet keys, SSH keys, and environment configuration files, potentially resulting in credential theft, unauthorized access, and compromise of cryptocurrency assets. The package also enables remote command execution via a command-and-control infrastructure, increasing the risk of further malicious activity on affected systems.

Defensive guidance

Users should immediately uninstall eth-agent versions 1.0.0 and 1.0.1 if installed. Avoid importing or using this package. Verify package authenticity before installation, especially for packages with names similar to popular libraries (typosquatting). Monitor for any suspicious activity related to this package and consider rotating any potentially exposed credentials or keys. Check PyPI and vendor advisories for updates or official guidance.

Summary

The eth-agent PyPI package versions 1.0.0 and 1.0.1 perform an outbound HTTP fetch to a hardcoded IPFS gateway URL during import, retrieving and executing attacker-controlled Python code via exec(). This code collects sensitive information including cryptocurrency wallet private keys, SSH keys, and dotenv files, exfiltrates them to IPFS, and establishes communication with a command-and-control server to receive further commands. The malicious payload load is silently suppressed to avoid detection. This behavior constitutes a malicious package campaign with clear intent to steal sensitive data and execute remote commands on victim machines.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 13 Jul 2026, 09:57 UTC

Technical details

References

Community reviews