MalwarePublished 9 Jul 2026Updated 5 Aug 2026

@wagni_bot/hyperliquid-sdk (npm) · Malicious Code

Affects @wagni_bot/hyperliquid-sdkSource GCVE Database

Malicious package : remove @wagni_bot/hyperliquid-sdk and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 15:56 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10026

What to do

Remove @wagni_bot/hyperliquid-sdk from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npm@wagni_bot/hyperliquid-sdk	Affected 1.0.0 – 1.2.0 8 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package @wagni_bot/hyperliquid-sdk is a malicious package impersonating the legitimate Hyperliquid exchange SDK. It contains no actual SDK code but includes a postinstall script that automatically runs on installation. This script scans common user directories and files for wallet-related artifacts, private keys, credentials, and browser extension data related to cryptocurrency wallets. It also attempts to identify files containing mnemonic seed phrases by tokenizing file contents and checking against a BIP39 wordlist. All collected data, along with system information, is exfiltrated to a hardcoded remote server. This package targets crypto developers by name impersonation to trick them into installing it.

Impact

This malicious package compromises the confidentiality of sensitive user data by harvesting cryptocurrency wallet keys, credentials, SSH keys, and other sensitive files from the victim's system. The exfiltration of mnemonic seed phrases and private keys can lead to theft of cryptocurrency assets and unauthorized access to cloud and version control accounts. The impersonation of a legitimate SDK increases the likelihood of installation by targeted developers, amplifying the risk of compromise.

Defensive guidance

The recommended mitigation is to avoid installing @wagni_bot/hyperliquid-sdk from untrusted sources. Verify package authenticity by checking the official Hyperliquid SDK repository and npm registry. Remove any installed versions of this package immediately. Monitor for suspicious network activity related to the hardcoded exfiltration endpoint. Use trusted package sources and enable npm security features such as two-factor authentication and package signing where possible.

Summary

The @wagni_bot/hyperliquid-sdk npm package is a malicious package that impersonates the legitimate Hyperliquid SDK. Instead of providing SDK functionality, it runs a postinstall script triggered automatically during npm install. This script scans the installer's home, Desktop, Documents, Downloads, /root, and /tmp directories for wallet-related files (e.g., id.json, wallet.json, keystore.json, metamask.json, phantom.json, seed.txt, mnemonic.txt), environment files (.env), credential files (.npmrc, .git-credentials, .netrc), SSH private keys, AWS credentials, and browser extension local settings for MetaMask and Phantom. It also reads user text files and uploads those containing 10 or more tokens matching the BIP39 mnemonic wordlist. The harvested data, including hostname, username, and current working directory, is sent via HTTP POST to a hardcoded IP address. The package versions identified as malicious are 1.0.0, 1.1.0, 1.1.1, 1.1.3, 1.1.4, 1.1.5, and 1.2.0.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 10:13 UTC

Technical details

References

Community reviews