The @holocronlab/botruntime-runtime npm package is a malicious runtime pretending to be compatible with Botpress SDK. It intercepts environment variables like BP_TOKEN and ADK_TOKEN, which are used for authentication in Botpress, and redirects API calls to a non-official domain (https://botruntime.ru) rather than the legitimate Botpress API endpoint (api.botpress.cloud). The package's source maps and dependency tree are crafted to resemble official Botpress packages, increasing the likelihood of developer trust and adoption. This behavior results in the silent exfiltration of authentication tokens and API traffic to an attacker-controlled infrastructure, compromising the confidentiality of Botpress credentials and operations.

If a developer installs this package and sets environment variables with real Botpress personal access tokens, those tokens and API traffic are redirected to an attacker-controlled domain. This can lead to unauthorized access to Botpress services and data associated with the stolen tokens. The malicious package effectively compromises the confidentiality and integrity of Botpress API interactions for affected users.

No official patch or remediation is indicated for this malicious package. The primary mitigation is to avoid installing @holocronlab/botruntime-runtime and related shadow packages. Developers should verify package authenticity and source before installation, prefer official Botpress packages, and rotate any Botpress tokens that may have been exposed by using this package. Monitor for unexpected API traffic redirection and remove any instances of this package from projects.