MAL-2026-4708

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/wallet-agent-ai/MAL-2026-4708.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-4708
Withdrawn
2026-05-26T19:01:24Z
Published
2026-05-24T07:26:29Z
Modified
2026-05-27T00:32:09.943404866Z
Summary
Malicious code in wallet-agent-ai (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (3bb49d047eeab68307095cf3a30ff0d42d745855890f181e4cb53dc2f6903e91)

dist/agent.js contains a hardcoded Telegram Bot API endpoint (https://api.telegram.org) used in a fetch/POST call near references to process.env. The package presents itself as a wallet/AI agent but ships a bot-token-bearing C2 channel inside its compiled JS, alongside a third-party API call to api.astrolescent.com. This is the canonical credential/data exfiltration pattern: caller-supplied or environment-derived data is POSTed to a Telegram bot controlled by the package author, giving the author silent access to whatever inputs or env values reach this code path. There is no legitimate reason for a wallet-related library to relay data through a hardcoded Telegram bot endpoint.

Database specific 
{
    "malicious-packages-origins": [
        {
            "modified_time": "2026-05-24T07:26:34Z",
            "sha256": "3bb49d047eeab68307095cf3a30ff0d42d745855890f181e4cb53dc2f6903e91",
            "id": "IN-MAL-2026-004470",
            "versions": [
                "1.0.1"
            ],
            "source": "amazon-inspector",
            "import_time": "2026-05-26T05:52:39.780881107Z"
        },
        {
            "modified_time": "2026-05-24T07:26:29Z",
            "sha256": "52ebcc1d038054657e9ec04e998713056e1b010188a95b18632b0786b08ee93a",
            "id": "IN-MAL-2026-004469",
            "versions": [
                "1.0.2"
            ],
            "source": "amazon-inspector",
            "import_time": "2026-05-26T05:52:39.644061694Z"
        }
    ]
}
References
Credits

Affected packages

npm / wallet-agent-ai

Package

Name
wallet-agent-ai
View open source insights on deps.dev
Purl
pkg:npm/wallet-agent-ai

Affected ranges

Affected versions

1.*
1.0.1
1.0.2

Database specific

cwes 
[
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    },
    {
        "cweId": "CWE-506",
        "name": "Embedded Malicious Code",
        "description": "The product contains code that appears to be malicious in nature."
    }
]
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/withdrawn/npm/wallet-agent-ai/MAL-2026-4708.json"
indicators 
{
    "evidence_files": [
        {
            "tlsh": "adf161365af5786038a3d18ca73b4007b4b9ba13740ce464b78cf1a56fdc12945f2abd",
            "path": "dist/agent.js",
            "sha256": "eb69aab5eb9be86ff5c6bc8eec20eb220f532a5dffbd2dd409856c035815a78e"
        }
    ],
    "package_integrity": [
        {
            "hashes": {
                "sha512_sri": "sha512-lqvbpwkgWcOW9CdT3I6uwrzn/f6/CQAC5SELlGzOXveQ8vAoI1yona63qM0c7BBfEg7v6Rr/UeB/SRhG7jDr2A==",
                "sha1": "61c27b09c64c457a35f55f8a8a191e4434179e23"
            },
            "filename": "wallet-agent-ai-1.0.1.tgz"
        }
    ]
}