OpenSSF/OSV advisory MAL-2026-4709 confirms this npm version as malicious. dist/agent.js contains a hardcoded Telegram Bot API endpoint (https://api.telegram.org) reached via fetch() with a POST body that includes values from process.env. The bundle co-references wallet-related endpoints (api.astrolescent.com) alongside the Telegram exfiltration channel...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in wallet-agent-ai-radix (npm)
Details
dist/agent.js contains a hardcoded Telegram Bot API endpoint (https://api.telegram.org) reached via fetch() with a POST body that includes values from process.env. The bundle co-references wallet-related endpoints (api.astrolescent.com) alongside the Telegram exfiltration channel. A package whose advertised purpose is wallet/agent functionality has no legitimate reason to POST environment data or wallet context to a hardcoded third-party Telegram bot — this is the canonical hardcoded-C2 exfiltration shape, where any installer/operator running this package leaks data to the attacker who controls the embedded bot token.
Decision reason
OpenSSF Malicious Packages via OSV confirms wallet-agent-ai-radix@1.0.0 as malicious (MAL-2026-4709): Malicious code in wallet-agent-ai-radix (npm)