MalwarePublished 9 Jul 2026Updated 1 Sep 2026

@wagni_bot/eth-agent (npm) · Malicious Code

Affects @wagni_bot/eth-agentSource GCVE Database

Malicious package : remove @wagni_bot/eth-agent and rotate any secrets on hosts that installed it.

Data as of 12 Sep 2026, 19:17 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10024

What to do

Remove @wagni_bot/eth-agent from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npm@wagni_bot/eth-agent	Affected 1.0.0 – 1.2.0 7 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package @wagni_bot/eth-agent is a malicious supply-chain credential stealer disguised as an Ethereum SDK. It executes a postinstall script on npm install that collects sensitive files such as SSH private keys, cryptocurrency wallet files, and environment variables containing secrets. The stolen data is exfiltrated to a hardcoded Telegram bot endpoint. This package is part of a coordinated campaign involving 25 similarly malicious packages under the @wagni_bot scope, all sharing identical payloads and exfiltration methods. The packages were live on npm as of 2026-07-09 and had not yet been cataloged in major vulnerability databases at that time.

Impact

Installing any of the affected versions of the @wagni_bot/eth-agent package results in immediate exfiltration of sensitive credentials and secrets from the installer's machine, including SSH private keys, cryptocurrency wallet files, and environment variables containing private keys, tokens, passwords, and seed phrases. This can lead to unauthorized access to developer environments, cryptocurrency wallets, and other sensitive systems. The exfiltration occurs silently during installation, with errors suppressed to avoid detection.

Defensive guidance

At the time of reporting, the malicious packages were still live on npm and no official patches or removals were documented. Users should avoid installing any packages under the @wagni_bot scope, especially @wagni_bot/eth-agent and its related versions. Remove any installed instances of these packages immediately. Monitor for suspicious network activity related to Telegram Bot API endpoints and review systems for potential credential compromise. Check the npm registry and vendor advisories for updates on package removal or remediation.

Summary

The @wagni_bot/eth-agent npm package contains a malicious postinstall lifecycle script that executes automatically upon installation. This script fingerprints the host environment, scans the user's home directory and current working directory for sensitive files including SSH keys and environment files, and collects environment variables with names indicative of secrets. The collected data is JSON-encoded and exfiltrated via the Telegram Bot API to a hardcoded bot token. The campaign includes 25 typosquat packages published simultaneously under the same npm scope, all sharing the same byte-identical payload and exfiltration endpoint, indicating a single automated actor. The main module of the package is empty, making the malicious behavior solely dependent on the postinstall script. This threat targets developers working with Ethereum tooling by masquerading as an Ethereum SDK.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 12 Sep 2026, 19:17 UTC

Technical details

References

Community reviews