THREATPKG
SYNC STALE
Supply-chain threat intelligence
Incident detail
Risk score
92
AI summary
Indexed incident for polymarket-data (pypi).
Description
The package attempts to exfiltrate sensitive data related to cryptocurrencies and API keys, as well as establish persistence. Likely related to 2026-05-polymarket-data-fetcher.
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2026-05-polymarket-data
Reasons (based on the campaign):
crypto-related
exfiltration-crypto
exfiltration-credentials
persistence
Technical details
Indicators
- affected version<function fixed() { [native code] }75%
- affected version<function fixed() { [native code] }75%
Timeline
- Advisory published
- Indexed by ThreatPkg
Related incidents
- Malicious code in bittensor-burn-watch (PyPI)bittensor-burn-watch92
- Malicious code in clip-logger (PyPI)clip-logger92
- Malicious code in executable-stories-jest (npm)executable-stories-jest92
- Malicious code in wrangler-deploy (npm)wrangler-deploy92
- Malicious code in node-env-resolver (npm)node-env-resolver92