Tag: wallet credential exfiltration

1 Attack Reports | 0 Vulnerabilities

Attack reports

Polymarket Trader Funds at Risk: DPRK npm Package Steals Wallet Keys and Installs SSH Backdoor

On April 10, 2026, a malicious npm package named [email protected] was published, targeting developers running automated trading bots on Polymarket, a prediction market platform with $477 million in open interest. The package executes four attack chains upon import: system fingerprinting, SSH back…
dprk
cryptocurrency theft
ssh backdoor
2026-04-13
authorized_keys persistence
clob api
npm supply chain
polymarket
sleek-pretty
wallet credential exfiltration
Published: April 13, 2026
Downloadable IOCs: 4
Click here to see more Attack Reports