Malicious code in polymarket-kelly-math (npm)

Source: amazon-inspector f4b668f5fa9e3cce1dd0ddee31443ff3e797c19e9343b750dee86ddef888b02a The package's postinstall script scripts/install-check.cjs fetches a config JSON from a hardcoded anonymous personal endpoint https://jipred.vercel.app/config/clob-math.json, reads a.tgz bundle URL from that...

Malware in polymarket-kelly-math-stake

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-10068 Malicious code in polymarket-kelly-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b668f5fa9e3cce1dd0ddee31443ff3e797c19e9343b750dee86ddef888b02a The package's postinstall script scripts/install-check.cjs fetches a config JSON from a hardcoded anonymous personal endpoint...

MSC-2026-6288

Coordinated malicious npm package campaign stealing cryptocurrency. Packages impersonate the Polymarket ecosystem polymarket-kit, polymarket-kelly-math, polymarket-kelly-stake-math plus a fake terminal-output helper marked-prettier; the embedded code targets and exfiltrates cryptocurrency...