MAL-2026-10026: Malicious code in @wagni_bot/hyperliquid-sdk (npm)
The npm package @wagni_bot/hyperliquid-sdk is a malicious package impersonating the legitimate Hyperliquid exchange SDK. It contains no actual SDK code but includes a postinstall script that automatically runs on installation. This script scans common user directories and files for wallet-related artifacts, private keys, credentials, and browser extension data related to cryptocurrency wallets. It also attempts to identify files containing mnemonic seed phrases by tokenizing file contents and checking against a BIP39 wordlist. All collected data, along with system information, is exfiltrated to a hardcoded remote server. This package targets crypto developers by name impersonation to trick them into installing it.
AI Analysis
Technical Summary
The @wagni_bot/hyperliquid-sdk npm package is a malicious package that impersonates the legitimate Hyperliquid SDK. Instead of providing SDK functionality, it runs a postinstall script triggered automatically during npm install. This script scans the installer's home, Desktop, Documents, Downloads, /root, and /tmp directories for wallet-related files (e.g., id.json, wallet.json, keystore.json, metamask.json, phantom.json, seed.txt, mnemonic.txt), environment files (.env), credential files (.npmrc, .git-credentials, .netrc), SSH private keys, AWS credentials, and browser extension local settings for MetaMask and Phantom. It also reads user text files and uploads those containing 10 or more tokens matching the BIP39 mnemonic wordlist. The harvested data, including hostname, username, and current working directory, is sent via HTTP POST to a hardcoded IP address. The package versions identified as malicious are 1.0.0, 1.1.0, 1.1.1, 1.1.3, 1.1.4, 1.1.5, and 1.2.0.
Potential Impact
This malicious package compromises the confidentiality of sensitive user data by harvesting cryptocurrency wallet keys, credentials, SSH keys, and other sensitive files from the victim's system. The exfiltration of mnemonic seed phrases and private keys can lead to theft of cryptocurrency assets and unauthorized access to cloud and version control accounts. The impersonation of a legitimate SDK increases the likelihood of installation by targeted developers, amplifying the risk of compromise.
Mitigation Recommendations
No official patch or fix is available for this malicious package as it is a case of a malicious npm package impersonation. The recommended mitigation is to avoid installing @wagni_bot/hyperliquid-sdk from untrusted sources. Verify package authenticity by checking the official Hyperliquid SDK repository and npm registry. Remove any installed versions of this package immediately. Monitor for suspicious network activity related to the hardcoded exfiltration endpoint. Use trusted package sources and enable npm security features such as two-factor authentication and package signing where possible.
MAL-2026-10026: Malicious code in @wagni_bot/hyperliquid-sdk (npm)
Description
The npm package @wagni_bot/hyperliquid-sdk is a malicious package impersonating the legitimate Hyperliquid exchange SDK. It contains no actual SDK code but includes a postinstall script that automatically runs on installation. This script scans common user directories and files for wallet-related artifacts, private keys, credentials, and browser extension data related to cryptocurrency wallets. It also attempts to identify files containing mnemonic seed phrases by tokenizing file contents and checking against a BIP39 wordlist. All collected data, along with system information, is exfiltrated to a hardcoded remote server. This package targets crypto developers by name impersonation to trick them into installing it.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The @wagni_bot/hyperliquid-sdk npm package is a malicious package that impersonates the legitimate Hyperliquid SDK. Instead of providing SDK functionality, it runs a postinstall script triggered automatically during npm install. This script scans the installer's home, Desktop, Documents, Downloads, /root, and /tmp directories for wallet-related files (e.g., id.json, wallet.json, keystore.json, metamask.json, phantom.json, seed.txt, mnemonic.txt), environment files (.env), credential files (.npmrc, .git-credentials, .netrc), SSH private keys, AWS credentials, and browser extension local settings for MetaMask and Phantom. It also reads user text files and uploads those containing 10 or more tokens matching the BIP39 mnemonic wordlist. The harvested data, including hostname, username, and current working directory, is sent via HTTP POST to a hardcoded IP address. The package versions identified as malicious are 1.0.0, 1.1.0, 1.1.1, 1.1.3, 1.1.4, 1.1.5, and 1.2.0.
Potential Impact
This malicious package compromises the confidentiality of sensitive user data by harvesting cryptocurrency wallet keys, credentials, SSH keys, and other sensitive files from the victim's system. The exfiltration of mnemonic seed phrases and private keys can lead to theft of cryptocurrency assets and unauthorized access to cloud and version control accounts. The impersonation of a legitimate SDK increases the likelihood of installation by targeted developers, amplifying the risk of compromise.
Mitigation Recommendations
No official patch or fix is available for this malicious package as it is a case of a malicious npm package impersonation. The recommended mitigation is to avoid installing @wagni_bot/hyperliquid-sdk from untrusted sources. Verify package authenticity by checking the official Hyperliquid SDK repository and npm registry. Remove any installed versions of this package immediately. Monitor for suspicious network activity related to the hardcoded exfiltration endpoint. Use trusted package sources and enable npm security features such as two-factor authentication and package signing where possible.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-10026
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a50baa368715ace43584e6f
Added to database: 07/10/2026, 09:25:55 UTC
Last enriched: 07/10/2026, 10:13:47 UTC
Last updated: 07/10/2026, 10:13:47 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.