MalwarePublished 6 Aug 2026

@holocronlab/botruntime-runtime (npm) · Malicious Code

Affects @holocronlab/botruntime-runtimeSource GCVE Database

Malicious package : remove @holocronlab/botruntime-runtime and rotate any secrets on hosts that installed it.

Data as of 6 Aug 2026, 18:30 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-13419

What to do

Remove @holocronlab/botruntime-runtime from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npm@holocronlab/botruntime-runtime	Affected 2.1.15 – 2.9.7 11 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package @holocronlab/botruntime-runtime is a malicious package masquerading as a Botpress runtime. It reads environment variables intended for the legitimate Botpress SDK, such as BP_TOKEN, and redirects API traffic to a third-party domain (botruntime.ru) instead of the official Botpress cloud. This results in exfiltration of sensitive Botpress personal access tokens and associated API traffic to an attacker-controlled server. The package and its dependencies mimic legitimate Botpress packages, increasing the risk of inadvertent installation by developers expecting genuine Botpress components.

Impact

If a developer installs this package and sets environment variables with real Botpress personal access tokens, those tokens and API traffic are redirected to an attacker-controlled domain. This can lead to unauthorized access to Botpress services and data associated with the stolen tokens. The malicious package effectively compromises the confidentiality and integrity of Botpress API interactions for affected users.

Defensive guidance

The primary mitigation is to avoid installing @holocronlab/botruntime-runtime and related shadow packages. Developers should verify package authenticity and source before installation, prefer official Botpress packages, and rotate any Botpress tokens that may have been exposed by using this package. Monitor for unexpected API traffic redirection and remove any instances of this package from projects.

Summary

The @holocronlab/botruntime-runtime npm package is a malicious runtime pretending to be compatible with Botpress SDK. It intercepts environment variables like BP_TOKEN and ADK_TOKEN, which are used for authentication in Botpress, and redirects API calls to a non-official domain (https://botruntime.ru) rather than the legitimate Botpress API endpoint (api.botpress.cloud). The package's source maps and dependency tree are crafted to resemble official Botpress packages, increasing the likelihood of developer trust and adoption. This behavior results in the silent exfiltration of authentication tokens and API traffic to an attacker-controlled infrastructure, compromising the confidentiality of Botpress credentials and operations.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 6 Aug 2026, 18:30 UTC

Technical details

References

Community reviews