@wagni_bot/hyperliquid-sdk@1.1.1

Analysis

A cluster of six combosquat packages impersonating legitimate web3 SDKs (web3-agent, bsc-sdk, opensea-sdk, polygon-sdk, metemask-sdk, hyperliquid-sdk) all publish an identical postinstall.js that steals credentials. On install, the script scans the current working directory and home directory for SSH private keys (id_rsa, id_ed25519), .pem/.key files, .cred files, and .env files, reads their contents, and exfiltrates them via HTTP POST to 107[.]161[.]90[.]180:7777. It also harvests environment variables containing PRIVATE, SECRET, TOKEN, API_KEY, PASSWORD, MNEMONIC, SEED, WALLET, or AWS and sends those to the same C2 endpoint. Each POST includes the hostname, username, and cwd as metadata.