The ethers-wallet-packages npm package is a malicious typosquat impersonating the legitimate @ethersproject/wallet package. It contains code that silently exfiltrates users' Ethereum private keys or mnemonic secrets to an attacker-controlled Telegram bot whenever the Wallet constructor is called. This compromises the victim's Ethereum funds and potentially the entire host system. The affected versions are 5.8.0 and 5.8.2. Removal of the package alone may not fully remediate the compromise, as the attacker may have gained broader control over the system.