Odaily Odaily that the GitHub project polymarket-copy-trading-bot has been infected with malicious code. Upon startup, the program automatically reads the user's wallet private key from their .env file and transmits it to a hacker's server via a hidden malicious dependency package, excluder-mcp-package@1.0.4, resulting in the theft of assets.
Polymarket's copy-trading bot project injects malicious code to steal private keys.
This article is machine translated
Show original
Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments
Share
Relevant content
