MalwarePublished 9 Jul 2026Updated 5 Aug 2026

@wagni_bot/metemask-sdk (npm) · Malicious Code

Affects @wagni_bot/metemask-sdkSource GCVE Database

Malicious package : remove @wagni_bot/metemask-sdk and rotate any secrets on hosts that installed it.

Data as of 26 Oct 2026, 15:56 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-10028

What to do

Remove @wagni_bot/metemask-sdk from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

Product	Affected	Fixed in
npm@wagni_bot/metemask-sdk	Affected 1.0.0 – 1.2.0 8 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The @wagni_bot/metemask-sdk npm package is a malicious typosquat of the legitimate metamask-sdk package. It contains no functional code but includes a postinstall script that executes automatically during npm install. This script recursively searches common directories and environment variables for sensitive credentials such as SSH private keys, crypto wallet seeds, and secret environment variables. The stolen data is then exfiltrated to an attacker-controlled Telegram channel. This threat targets developers who mistakenly install this similarly named package.

Impact

Successful installation of this package leads to theft of sensitive credentials including SSH private keys, crypto wallet seed phrases, dotenv secrets, and environment variables containing secrets. This can result in unauthorized access to developer systems, cloud accounts, and cryptocurrency wallets. The exfiltration to an attacker-controlled Telegram channel enables remote attackers to collect these credentials stealthily during the npm install process.

Defensive guidance

The primary mitigation is to avoid installing this package and verify package names carefully before installation. Use trusted sources and package integrity verification methods such as npm audit, package signing, or lockfiles. Remove any instances of @wagni_bot/metemask-sdk from projects and systems if found. Monitor for suspicious postinstall scripts in dependencies.

Summary

@wagni_bot/metemask-sdk is a malicious npm package designed as a single-character typosquat of the legitimate metamask-sdk. Its index.js is an empty stub, but it includes a postinstall hook that runs automatically on npm install. This hook recursively scans the current working directory, the user's home directory, and the ~/.ssh directory for files with names indicating sensitive credentials (.env, .pem, mnemonic, id_rsa, etc.). It also collects environment variables containing keywords like PRIVATE, SECRET, TOKEN, and PASSWORD. Host identifiers such as hostname and user info are gathered. All harvested data is sent in chunks via HTTP POST requests to a Telegram bot endpoint controlled by the attacker. The package affects specific versions explicitly listed and is not a cloud service. There is no CVSS score or known exploits in the wild documented.

References

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 10 Jul 2026, 10:13 UTC

Technical details

References

Community reviews