malware npm
polymarket-validator
discovered 2026-05-28Contagious Trader package published by toskypi (Feb 2026). Exfiltrates to sha256-validate-rpc.vercel[.]app. Attributed to DPRK Famous Chollima via toskypi identity ([email protected]).
Threat types
credential_stealer data_exfiltration
Malicious versions
- 1.0.0
