{"id":"MAL-2026-10024","summary":"Malicious code in @wagni_bot/eth-agent (npm)","details":"The npm package `@wagni_bot/eth-agent` is a supply-chain credential stealer disguised as a **Ethereum** SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope `@wagni_bot` on 2026-07-09.\n\nEach package declares a `postinstall` lifecycle hook (`postinstall: node postinstall.js`) that executes automatically on `npm install`, before the package is ever imported. The script fingerprints the host and user (`os.hostname()`, `os.userInfo()`, `os.platform()`), walks the user's home directory (`readdirSync`/`readFileSync`) and reads high-value secrets — SSH private keys (`~/.ssh/id_rsa`), cryptocurrency wallet files, and `.env` files (API keys, tokens, seed phrases). It then JSON-encodes the collected data and exfiltrates it to a hardcoded Telegram bot via the Telegram Bot API `sendMessage` endpoint (https://api.telegram.org/bot8804087989:AAHUia-5DCloXsg9M9QhffTsHO5J_6FAxQM/sendMessage). All error paths are swallowed so the install appears normal.\n\ncodelake Research proved the packages belong to one campaign deterministically: the payload file is byte-identical across all 25 packages at each published version (version-lockstep), and every package exfiltrates to the same Telegram bot token — a single automated actor. Detected and classified independently from the live npm feed on 2026-07-09; at the time of reporting the packages were still live on npm and none of the 25 were present in OSV or GHSA (a first-catch).\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (08c234c984ea87a7d4c780dc8ddbc244926628e405ea0f7ac9798309260a6122)\nThe package advertises itself as an 'Unofficial eth-agent SDK' but ships an empty main module (index.js contains only `module.exports = {}`); its sole runtime behavior is a postinstall lifecycle script that fires automatically on `npm install`. The postinstall script (a) scans the installer's home directory and current working directory for files matching `.pem`, `.key`, `id_rsa`, `id_ed25519`, `.cred`, and `.env`, (b) walks `~/.ssh` to collect SSH private keys, (c) iterates `process.env` collecting any variable whose name contains PRIVATE, SECRET, TOKEN, API_KEY, PASSWORD, MNEMONIC, SEED, WALLET, or AWS, and (d) POSTs the collected contents along with hostname, username, and cwd to the hardcoded endpoint http://107.161.90.180:7777 over plain HTTP with no TLS and no authentication. Errors are silently swallowed. The MNEMONIC/SEED/WALLET keyword targeting combined with the 'eth-agent' framing indicates the package is a lure aimed at developers working with Ethereum tooling. Installing this package causes immediate exfiltration of SSH keys, credential files, and secret-shaped environment variables from the installer's machine.\n","aliases":["GHSA-h4p6-fwxp-9h2p"],"modified":"2026-09-01T11:30:33.685471096Z","published":"2026-07-09T00:00:00Z","database_specific":{"iocs":{"hashes":["sha256:5ec888cf093ee96204156efa1edf86ac7c8ce62421a74d06e03924265ba375fa"],"urls":["https://api.telegram.org/bot8804087989:AAHUia-5DCloXsg9M9QhffTsHO5J_6FAxQM/sendMessage"]},"malicious-packages-origins":[{"source":"amazon-inspector","versions":["1.2.0"],"id":"IN-MAL-2026-009021","import_time":"2026-07-09T16:20:33.187947716Z","modified_time":"2026-07-09T15:15:40Z","sha256":"03e42c868cfcdc9ed37b2ddf6dfa6141aa03e38563b6985db559f98b6eb6d1d8"},{"id":"IN-MAL-2026-009026","import_time":"2026-07-09T16:20:33.597139238Z","modified_time":"2026-07-09T15:16:29Z","sha256":"5d46415892919215eed071bdd66ba9a95e95ca5e81bfe55022abf0f36910319d","source":"amazon-inspector","versions":["1.1.3"]},{"modified_time":"2026-07-09T15:21:12Z","sha256":"a44c949d55ca78d2c8a63129464171771decc48c12f7a0bacdde7c91822a8c2b","source":"amazon-inspector","versions":["1.1.4"],"id":"IN-MAL-2026-009055","import_time":"2026-07-09T16:20:36.83279167Z"},{"source":"amazon-inspector","versions":["1.0.0"],"id":"IN-MAL-2026-009074","import_time":"2026-07-09T16:20:38.378349895Z","modified_time":"2026-07-09T15:24:16Z","sha256":"ec9dd5533310b4c6393d25622fbdd945c9347d85813da4f9cccdf313103b9516"},{"id":"IN-MAL-2026-009032","import_time":"2026-07-09T16:20:33.968872855Z","modified_time":"2026-07-09T15:17:31Z","sha256":"04aad2fc52ba0f786600e686fa8809f5e1ae54882b119289f3f8d42d7038e7c7","source":"amazon-inspector","versions":["1.1.5"]},{"versions":["1.1.0"],"id":"IN-MAL-2026-009072","import_time":"2026-07-09T16:20:38.229493978Z","modified_time":"2026-07-09T15:23:52Z","sha256":"08c234c984ea87a7d4c780dc8ddbc244926628e405ea0f7ac9798309260a6122","source":"amazon-inspector"},{"sha256":"2c4729a80b5bf5b9251915cd285c3146bcee654db2068ad9a763478550643d10","source":"amazon-inspector","versions":["1.1.1"],"id":"IN-MAL-2026-009065","import_time":"2026-07-09T16:20:37.742828939Z","modified_time":"2026-07-09T15:22:48Z"},{"source":"amazon-inspector","versions":["1.1.2"],"id":"IN-MAL-2026-013324","import_time":"2026-08-05T07:06:41.397675512Z","modified_time":"2026-08-05T06:06:51Z","sha256":"280623c101e70dc38a4fd05a3b920b837a0ea488884f79a43dd05950d5683273"},{"modified_time":"2026-08-05T06:06:35Z","sha256":"fcf80bf3bf12d8245304faec051df84586290e8f1dad6a28138ece263d6cf883","source":"amazon-inspector","versions":["1.0.2"],"id":"IN-MAL-2026-013322","import_time":"2026-08-05T07:06:41.308332916Z"},{"import_time":"2026-09-01T11:17:26.237172334Z","modified_time":"2026-08-24T16:34:12Z","sha256":"17018513898dacec67c1589dbbd9aff3683fc876777a69c9f7d290c102dc988f","source":"reversing-labs","versions":["1.2.0"],"id":"RLMA-2026-05943"}]},"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.2.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.5"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.1"},{"type":"ADVISORY","url":"https://research.codelake.dev/advisories/clr-2026-3019-wagni-eth-agent"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.2"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.0.2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-h4p6-fwxp-9h2p"}],"affected":[{"package":{"name":"@wagni_bot/eth-agent","ecosystem":"npm","purl":"pkg:npm/%40wagni_bot/eth-agent"},"versions":["1.2.0","1.1.3","1.1.4","1.0.0","1.1.5","1.1.0","1.1.1","1.0.2","1.1.2"],"database_specific":{"indicators":{"evidence_files":[{"sha256":"6c9c16897e74d441ac24472d86e97fac219c2fc56f14408ef406b2883df03654","tlsh":"6712d9c576be111d1427d2bbfa2b0202356eae8a260dd995fcce09002f583945bd7bfc","path":"postinstall.js"},{"path":"package.json","sha256":"31a8dc1ad7854885c54491ac8b114e770d6294f01318fd5c7daf0cbf5874121b","tlsh":"bdd05e204d505b3378c81bed1827416ba9f3491b10082a2837db2994430e27b987b21f"}],"package_integrity":[{"hashes":{"sha1":"37681094a03077d79b9101816f095f4565853f1a","sha512_sri":"sha512-gx+DBX1dOLO72E+z4bqM4gEdtv1Ks4DxD71B1WM5di/1pfWYBrgxbtZcxN+/4ILkKfM0UfCJ2dC0eYqoA4uuzg=="},"filename":"eth-agent-1.2.0.tgz"}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@wagni_bot/eth-agent/MAL-2026-10024.json","cwes":[{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"name":"Embedded Malicious Code","cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature."},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code","cweId":"CWE-506"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}]}}],"schema_version":"1.9.0","credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"ReversingLabs","contact":["https://www.reversinglabs.com"],"type":"FINDER"},{"name":"codelake Research","contact":["https://research.codelake.dev/advisories/clr-2026-3019-wagni-eth-agent"],"type":"FINDER"}]}