@wagni_bot/metemask-sdk is a malicious npm package designed as a single-character typosquat of the legitimate metamask-sdk. Its index.js is an empty stub, but it includes a postinstall hook that runs automatically on npm install. This hook recursively scans the current working directory, the user's home directory, and the ~/.ssh directory for files with names indicating sensitive credentials (.env, .pem, mnemonic, id_rsa, etc.). It also collects environment variables containing keywords like PRIVATE, SECRET, TOKEN, and PASSWORD. Host identifiers such as hostname and user info are gathered. All harvested data is sent in chunks via HTTP POST requests to a Telegram bot endpoint controlled by the attacker. The package affects specific versions explicitly listed and is not a cloud service. There is no CVSS score or known exploits in the wild documented.

Successful installation of this package leads to theft of sensitive credentials including SSH private keys, crypto wallet seed phrases, dotenv secrets, and environment variables containing secrets. This can result in unauthorized access to developer systems, cloud accounts, and cryptocurrency wallets. The exfiltration to an attacker-controlled Telegram channel enables remote attackers to collect these credentials stealthily during the npm install process.

No official patch or remediation is available since this is a malicious typosquat package rather than a vulnerability in legitimate software. The primary mitigation is to avoid installing this package and verify package names carefully before installation. Use trusted sources and package integrity verification methods such as npm audit, package signing, or lockfiles. Remove any instances of @wagni_bot/metemask-sdk from projects and systems if found. Monitor for suspicious postinstall scripts in dependencies.