{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          },
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "postinstall.js",
              "sha256": "6c9c16897e74d441ac24472d86e97fac219c2fc56f14408ef406b2883df03654",
              "tlsh": "6712d9c576be111d1427d2bbfa2b0202356eae8a260dd995fcce09002f583945bd7bfc"
            },
            {
              "path": "package.json",
              "sha256": "31a8dc1ad7854885c54491ac8b114e770d6294f01318fd5c7daf0cbf5874121b",
              "tlsh": "bdd05e204d505b3378c81bed1827416ba9f3491b10082a2837db2994430e27b987b21f"
            }
          ],
          "package_integrity": [
            {
              "filename": "eth-agent-1.2.0.tgz",
              "hashes": {
                "sha1": "37681094a03077d79b9101816f095f4565853f1a",
                "sha512_sri": "sha512-gx+DBX1dOLO72E+z4bqM4gEdtv1Ks4DxD71B1WM5di/1pfWYBrgxbtZcxN+/4ILkKfM0UfCJ2dC0eYqoA4uuzg=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "@wagni_bot/eth-agent"
      },
      "versions": [
        "1.2.0",
        "1.1.3",
        "1.1.4",
        "1.0.0",
        "1.1.5",
        "1.1.0",
        "1.1.1",
        "1.0.2",
        "1.1.2"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    },
    {
      "contact": [
        "https://research.codelake.dev/advisories/clr-2026-3019-wagni-eth-agent"
      ],
      "name": "codelake Research",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "iocs": {
      "hashes": [
        "sha256:5ec888cf093ee96204156efa1edf86ac7c8ce62421a74d06e03924265ba375fa"
      ],
      "urls": [
        "https://api.telegram.org/bot8804087989:AAHUia-5DCloXsg9M9QhffTsHO5J_6FAxQM/sendMessage"
      ]
    },
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-009021",
        "import_time": "2026-07-09T16:20:33.187947716Z",
        "modified_time": "2026-07-09T15:15:40Z",
        "sha256": "03e42c868cfcdc9ed37b2ddf6dfa6141aa03e38563b6985db559f98b6eb6d1d8",
        "source": "amazon-inspector",
        "versions": [
          "1.2.0"
        ]
      },
      {
        "id": "IN-MAL-2026-009026",
        "import_time": "2026-07-09T16:20:33.597139238Z",
        "modified_time": "2026-07-09T15:16:29Z",
        "sha256": "5d46415892919215eed071bdd66ba9a95e95ca5e81bfe55022abf0f36910319d",
        "source": "amazon-inspector",
        "versions": [
          "1.1.3"
        ]
      },
      {
        "id": "IN-MAL-2026-009055",
        "import_time": "2026-07-09T16:20:36.83279167Z",
        "modified_time": "2026-07-09T15:21:12Z",
        "sha256": "a44c949d55ca78d2c8a63129464171771decc48c12f7a0bacdde7c91822a8c2b",
        "source": "amazon-inspector",
        "versions": [
          "1.1.4"
        ]
      },
      {
        "id": "IN-MAL-2026-009074",
        "import_time": "2026-07-09T16:20:38.378349895Z",
        "modified_time": "2026-07-09T15:24:16Z",
        "sha256": "ec9dd5533310b4c6393d25622fbdd945c9347d85813da4f9cccdf313103b9516",
        "source": "amazon-inspector",
        "versions": [
          "1.0.0"
        ]
      },
      {
        "id": "IN-MAL-2026-009032",
        "import_time": "2026-07-09T16:20:33.968872855Z",
        "modified_time": "2026-07-09T15:17:31Z",
        "sha256": "04aad2fc52ba0f786600e686fa8809f5e1ae54882b119289f3f8d42d7038e7c7",
        "source": "amazon-inspector",
        "versions": [
          "1.1.5"
        ]
      },
      {
        "id": "IN-MAL-2026-009072",
        "import_time": "2026-07-09T16:20:38.229493978Z",
        "modified_time": "2026-07-09T15:23:52Z",
        "sha256": "08c234c984ea87a7d4c780dc8ddbc244926628e405ea0f7ac9798309260a6122",
        "source": "amazon-inspector",
        "versions": [
          "1.1.0"
        ]
      },
      {
        "id": "IN-MAL-2026-009065",
        "import_time": "2026-07-09T16:20:37.742828939Z",
        "modified_time": "2026-07-09T15:22:48Z",
        "sha256": "2c4729a80b5bf5b9251915cd285c3146bcee654db2068ad9a763478550643d10",
        "source": "amazon-inspector",
        "versions": [
          "1.1.1"
        ]
      }
    ]
  },
  "details": "The npm package `@wagni_bot/eth-agent` is a supply-chain credential stealer disguised as a **Ethereum** SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope `@wagni_bot` on 2026-07-09.\n\nEach package declares a `postinstall` lifecycle hook (`postinstall: node postinstall.js`) that executes automatically on `npm install`, before the package is ever imported. The script fingerprints the host and user (`os.hostname()`, `os.userInfo()`, `os.platform()`), walks the user\u0027s home directory (`readdirSync`/`readFileSync`) and reads high-value secrets \u2014 SSH private keys (`~/.ssh/id_rsa`), cryptocurrency wallet files, and `.env` files (API keys, tokens, seed phrases). It then JSON-encodes the collected data and exfiltrates it to a hardcoded Telegram bot via the Telegram Bot API `sendMessage` endpoint (https://api.telegram.org/bot8804087989:AAHUia-5DCloXsg9M9QhffTsHO5J_6FAxQM/sendMessage). All error paths are swallowed so the install appears normal.\n\ncodelake Research proved the packages belong to one campaign deterministically: the payload file is byte-identical across all 25 packages at each published version (version-lockstep), and every package exfiltrates to the same Telegram bot token \u2014 a single automated actor. Detected and classified independently from the live npm feed on 2026-07-09; at the time of reporting the packages were still live on npm and none of the 25 were present in OSV or GHSA (a first-catch).\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (08c234c984ea87a7d4c780dc8ddbc244926628e405ea0f7ac9798309260a6122)\nThe package advertises itself as an \u0027Unofficial eth-agent SDK\u0027 but ships an empty main module (index.js contains only `module.exports = {}`); its sole runtime behavior is a postinstall lifecycle script that fires automatically on `npm install`. The postinstall script (a) scans the installer\u0027s home directory and current working directory for files matching `.pem`, `.key`, `id_rsa`, `id_ed25519`, `.cred`, and `.env`, (b) walks `~/.ssh` to collect SSH private keys, (c) iterates `process.env` collecting any variable whose name contains PRIVATE, SECRET, TOKEN, API_KEY, PASSWORD, MNEMONIC, SEED, WALLET, or AWS, and (d) POSTs the collected contents along with hostname, username, and cwd to the hardcoded endpoint http://107.161.90.180:7777 over plain HTTP with no TLS and no authentication. Errors are silently swallowed. The MNEMONIC/SEED/WALLET keyword targeting combined with the \u0027eth-agent\u0027 framing indicates the package is a lure aimed at developers working with Ethereum tooling. Installing this package causes immediate exfiltration of SSH keys, credential files, and secret-shaped environment variables from the installer\u0027s machine.\n",
  "id": "MAL-2026-10024",
  "modified": "2026-07-28T07:58:22Z",
  "published": "2026-07-09T00:00:00Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.2.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.3"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.4"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.0.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.5"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.0"
    },
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/@wagni_bot/eth-agent/v/1.1.1"
    },
    {
      "type": "ADVISORY",
      "url": "https://research.codelake.dev/advisories/clr-2026-3019-wagni-eth-agent"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in @wagni_bot/eth-agent (npm)"
}