Poisoned Pipeline

Poisoned Pipeline / Incidents / AS95

AS95 · 2026-05

Polymarket fake-bot and wallet-key npm campaign

npmGit / GitHubDocker / containers

SafeDep documented a Polymarket-themed npm campaign in several posts:
a GitHub “arbitrage bot” (53 forks) with a malicious npm dependency;
nine packages that social-engineer a postinstall prompt and exfiltrate
raw wallet keys; and redeem-onchain-sdk impersonating a helper SDK
(SSH, AWS, npm tokens, Docker, Chrome). Ten coordinated npm accounts
and four delivery techniques.

Mapped techniques

supply-chain social-engineered crypto packages

T0110 · Resource Development · Advertise malicious artifact

Fake Polymarket bot repo and helper-SDK names.

T0109 · Resource Development · Publish malicious artifact

Nine-plus packages across ten npm accounts.

T0151 · Execution · Installation scripts

postinstall prompt harvested raw private keys.

T0184 · Credential Access · Harvesting sensitive information from files

Wallet keys, SSH, AWS, npm, Docker, Chrome.

Sources