Malicious Package set-utils Discovered on PyPI Stealing Ethereum Private Keys

A malicious package named set-utils has been discovered on the Python Package Index (PyPI). This package stole Ethereum private keys by intercepting wallet creation functions and transferred victims' funds via the Polygon blockchain. The package has been downloaded more than 1000 times.