Malicious code in @wagni_bot/eth-agent (npm)
The npm package @wagni_bot/eth-agent is a malicious supply-chain credential stealer disguised as an Ethereum SDK. It executes a postinstall script on npm install that collects sensitive files such as SSH private keys, cryptocurrency wallet files, and environment variables containing secrets. The stolen data is exfiltrated to a hardcoded Telegram bot endpoint. This package is part of a coordinated campaign involving 25 similarly malicious packages under the @wagni_bot scope, all sharing identical payloads and exfiltration methods. The packages were live on npm as of 2026-07-09 and had not yet been cataloged in major vulnerability databases at that time.
AI Analysis
Technical Summary
The @wagni_bot/eth-agent npm package contains a malicious postinstall lifecycle script that executes automatically upon installation. This script fingerprints the host environment, scans the user's home directory and current working directory for sensitive files including SSH keys and environment files, and collects environment variables with names indicative of secrets. The collected data is JSON-encoded and exfiltrated via the Telegram Bot API to a hardcoded bot token. The campaign includes 25 typosquat packages published simultaneously under the same npm scope, all sharing the same byte-identical payload and exfiltration endpoint, indicating a single automated actor. The main module of the package is empty, making the malicious behavior solely dependent on the postinstall script. This threat targets developers working with Ethereum tooling by masquerading as an Ethereum SDK.
Potential Impact
Installing any of the affected versions of the @wagni_bot/eth-agent package results in immediate exfiltration of sensitive credentials and secrets from the installer's machine, including SSH private keys, cryptocurrency wallet files, and environment variables containing private keys, tokens, passwords, and seed phrases. This can lead to unauthorized access to developer environments, cryptocurrency wallets, and other sensitive systems. The exfiltration occurs silently during installation, with errors suppressed to avoid detection.
Mitigation Recommendations
At the time of reporting, the malicious packages were still live on npm and no official patches or removals were documented. Users should avoid installing any packages under the @wagni_bot scope, especially @wagni_bot/eth-agent and its related versions. Remove any installed instances of these packages immediately. Monitor for suspicious network activity related to Telegram Bot API endpoints and review systems for potential credential compromise. Check the npm registry and vendor advisories for updates on package removal or remediation. Patch status is not yet confirmed — check the vendor advisory or npm security advisories for current remediation guidance.
Malicious code in @wagni_bot/eth-agent (npm)
Description
The npm package @wagni_bot/eth-agent is a malicious supply-chain credential stealer disguised as an Ethereum SDK. It executes a postinstall script on npm install that collects sensitive files such as SSH private keys, cryptocurrency wallet files, and environment variables containing secrets. The stolen data is exfiltrated to a hardcoded Telegram bot endpoint. This package is part of a coordinated campaign involving 25 similarly malicious packages under the @wagni_bot scope, all sharing identical payloads and exfiltration methods. The packages were live on npm as of 2026-07-09 and had not yet been cataloged in major vulnerability databases at that time.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The @wagni_bot/eth-agent npm package contains a malicious postinstall lifecycle script that executes automatically upon installation. This script fingerprints the host environment, scans the user's home directory and current working directory for sensitive files including SSH keys and environment files, and collects environment variables with names indicative of secrets. The collected data is JSON-encoded and exfiltrated via the Telegram Bot API to a hardcoded bot token. The campaign includes 25 typosquat packages published simultaneously under the same npm scope, all sharing the same byte-identical payload and exfiltration endpoint, indicating a single automated actor. The main module of the package is empty, making the malicious behavior solely dependent on the postinstall script. This threat targets developers working with Ethereum tooling by masquerading as an Ethereum SDK.
Potential Impact
Installing any of the affected versions of the @wagni_bot/eth-agent package results in immediate exfiltration of sensitive credentials and secrets from the installer's machine, including SSH private keys, cryptocurrency wallet files, and environment variables containing private keys, tokens, passwords, and seed phrases. This can lead to unauthorized access to developer environments, cryptocurrency wallets, and other sensitive systems. The exfiltration occurs silently during installation, with errors suppressed to avoid detection.
Mitigation Recommendations
At the time of reporting, the malicious packages were still live on npm and no official patches or removals were documented. Users should avoid installing any packages under the @wagni_bot scope, especially @wagni_bot/eth-agent and its related versions. Remove any installed instances of these packages immediately. Monitor for suspicious network activity related to Telegram Bot API endpoints and review systems for potential credential compromise. Check the npm registry and vendor advisories for updates on package removal or remediation. Patch status is not yet confirmed — check the vendor advisory or npm security advisories for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-10024
- Osv Schema Version
- 1.7.4
- Ecosystems
- ["npm"]
Threat ID: 6a50baa368715ace43584e7c
Added to database: 07/10/2026, 09:25:55 UTC
Last enriched: 09/12/2026, 19:17:07 UTC
Last updated: 09/12/2026, 19:17:07 UTC
Views: 86
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.