MAL-2026-2404

-= Per source details. Do not edit below this line.=-

Source: kam193 (e807b32b64c457df7e89ee3ba1e8e25fe779ccff08b1da00800b705ff833f42e)

Clones of a legitimate library. During processing the private key, it's getting exfiltrated.

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.

Campaign: 2026-04-ether-account

Reasons (based on the campaign):

• clones-real-package

• action-hidden-in-lib-usage

• crypto-related

• exfiltration-crypto

• typosquatting