Malicious code in polymarket-mcp-v2 (npm)

Source: amazon-inspector cbccd8ee43d5fefa17eb83c5528b66a52315351a404aa54c4a32d1af0dbf238e The package's postinstall hook loads index.js and executes routines that 1 recursively scan the install directory for id.json,.env, env, config.toml and Config.toml and POST their contents to...

Malicious Package

Overview polymarket-mcp-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...