Malicious code in @wagni_bot/wagni (npm)

The npm package @wagnibot/wagni is a supply-chain credential stealer disguised as a the campaign's own namesake handle SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a...

PT-2025-40870

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A remote, unauthorized attacker can brute force folders and files and read them, potentially exposing sensitive information such as private keys or configurations. This allows for the gathering of...