PyPI Malware Exploits Developers to Hijack Ethereum Wallets

A recent discovery by the Socket Research Team has unveiled a malicious PyPI package named ‘set-utils’, designed to steal Ethereum private keys by exploiting commonly used account creation functions in Python-based blockchain applications. This package, masquerading as a utility for Python sets, has been downloaded over 1,000 times since January 29, 2025, posing a significant … Continue reading PyPI Malware Exploits Developers to Hijack Ethereum Wallets