The @wagni_bot/web3-agent npm package versions 1.0.0, 1.1.0, 1.1.1, 1.1.3, 1.1.4, and 1.1.5 contain malicious code in a postinstall.js script. This script recursively scans the current working directory and the user's home directory, including cryptocurrency wallet directories and SSH key locations, for files containing private keys and seed phrases. It also inspects environment variables for secrets. The collected sensitive data, including Ethereum and Bitcoin private keys, SSH private keys, and various tokens, is sent via HTTP POST to a hardcoded IP address (http://107.161.90.180:7777). The package's index.js exports an empty object, indicating no legitimate SDK functionality, confirming its sole purpose is data theft.

Users who install any of the affected versions of @wagni_bot/web3-agent risk having their private cryptographic keys, SSH private keys, and sensitive environment variables exfiltrated to an attacker-controlled server. This compromises the confidentiality of cryptocurrency wallets, SSH access credentials, and other secret tokens, potentially leading to unauthorized access, theft of funds, and further system compromise.

No official patch or remediation is currently documented for this malicious package. The best mitigation is to avoid installing @wagni_bot/web3-agent entirely. If already installed, remove the package immediately and rotate any potentially compromised keys and secrets. Monitor for any unauthorized access to affected wallets or systems. Since this is a malicious package, no legitimate fix exists; users should rely on trusted sources and verify package authenticity before installation.