The eth-web3-utils package on PyPI version 1.0.0 contains malicious code that masquerades as an Ethereum utility but actually exfiltrates users' seed phrases or private keys. This malware is part of a campaign targeting crypto-related files for exfiltration.