npm scope

@wagni_bot

LPM Firewall blocks 25 packages in the @wagni_bot npm scope. 8 have LPM's own review and are listed first.

Jul 28, 2026

@wagni_bot/eth-agent@1.1.2

OpenSSF Malicious Packages via OSV confirms @wagni_bot/eth-agent@1.1.2 as malicious (MAL-2026-10024): Malicious code in @wagni_bot/eth-agent (npm)

Jul 28, 2026

@wagni_bot/polymarket-sdk@1.1.2

Malware

OpenSSF Malicious Packages via OSV confirms @wagni_bot/polymarket-sdk@1.1.2 as malicious (MAL-2026-10033): Malicious code in @wagni_bot/polymarket-sdk (npm)

Jul 9, 2026

@wagni_bot/metemask-sdk@1.0.0

Credential exfiltration

Direct source inspection confirms unconsented install-time credential harvesting and external exfiltration unrelated to an SDK. This is concrete malicious behavior, not merely a suspiciou...

Jul 9, 2026

@wagni_bot/opensea-sdk@1.0.0

Credential exfiltration

Direct source inspection confirms unconsented install-time credential and file harvesting with external exfiltration to Telegram, unrelated to an OpenSea SDK. This is concrete malicious b...