Malicious code in polymarket-claude-code (npm)

A coordinated supply-chain attack comprising 9 npm packages published by maintainer polymarketdev GitHub actor texsellix, repo texsellix/polymarket-trading-bot within a 2-minute window on 2026-05-20T23:30Z–23:32Z. All packages masquerade as legitimate Polymarket CLOB trading tools while...

WS-2022-0115

The package 'ethers.js' in NPM is brand-jacking a popular legit package and is malicious. The package was uploaded first time in April 16th 2022. Only one version number 19.0.5 was uploaded and is malicious. The malicious package is brand-jacking a very popular crypto package 'ethers' which has...