MAL-2026-5086

    Dashboard / Malicious Package / MAL-2026-5086

    MAL-2026-5086

    Published: 30 May 2026Last Modified: 9 Jul 2026

    Summary: Malicious code in polymarket-data (PyPI)

    Details: Source: kam193 (a690aea77d0d48fae2a4f500f434cc5d4fb5cde042b7b902b0ee647b97921dc4) The package attempts to exfiltrate sensitive data related to cryptocurrencies and API keys, as well as establish persistence. Likely related to 2026-05-polymarket-data-fetcher. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-05-polymarket-data Reasons (based on the campaign): - crypto-related - exfiltration-crypto - exfiltration-credentials - persistence

    References: https://bad-packages.kam193.eu/pypi/package/polymarket-data

    Affected packages

    Package

    Name: polymarket-data

    Purl: pkg:pypi/polymarket-data

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    2.0.0
    2.0.1