registry / Remote code execution / polymarket-trader-apis
polymarket-trader-apis
Provides utilities for trading and interacting with Polymarket markets.
This report shows the evidence for polymarket-trader-apis@2.1.0. 2 of 3 known versions are blocked or flagged. The newest version, 0.0.1-security, is allowed. See all versions.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiSource inspection confirms concrete remote code execution from an unrelated endpoint, not merely suspicious primitives or package-aligned network activity. Although there is no install hook, the runtime exported behavior is a staged payload carrier with arbitrary code execution capability.
Static reason
One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review
Trigger
Runtime call to the default export getPlugin(), or any consumer code invoking it without arguments.
Impact
Arbitrary remote JavaScript can run in the consuming Node process with module loading and process/global access.
Mechanism
remote code fetch plus Function constructor execution
Attack narrative
A consumer importing the package and calling its default export triggers getPlugin(), which fetches https://svganchordev.net/icons/108. If the response is OK JSON, the package reads data.credits and executes it with new Function while exposing require, process, Buffer, timers, and globalThis. This lets the remote endpoint supply arbitrary Node.js code at runtime, inconsistent with the package’s claimed Polymarket API purpose.
AI rationale
Source inspection confirms concrete remote code execution from an unrelated endpoint, not merely suspicious primitives or package-aligned network activity. Although there is no install hook, the runtime exported behavior is a staged payload carrier with arbitrary code execution capability.
Evidence
index.jspackage.json
Network endpoints2
svganchordev.net/icons/108cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/svgs/brands/
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- index.js default export getPlugin() fetches https://svganchordev.net/icons/108 by default and expects JSON field data.credits.
- index.js constructs new Function(..., data.credits) with require, process, Buffer, timers, and globalThis passed into remote code.
- package.json main is index.js; package description claims Polymarket trading utilities, but index.js is unrelated CDN/icon loader and remote code executor.
- package.json includes credential/browser-data adjacent dependencies (@primno/dpapi, sqlite libraries, node-machine-id, socket.io-client) not used by visible source but made available to remote payload via require.
Evidence against
- package.json has no npm lifecycle hooks, bin, or install-time execution.
- Static source does not itself read files, harvest env vars, spawn child processes, or write persistence before the fetched payload runs.
- Remote execution is user/importer invoked through the default exported function, not automatic on install.
Behavioral surface
EvalNetwork
Source & flagged code
2 flagged · loading sourceindex.jsView file
149// Note: The code uses async/await, so we need to handle that
L150: const evalFn = new Function(
L151: 'require', 'module', 'exports', '__dirname', '__filename', 'console', 'process', 'global', 'Buffer', 'setTimeout', 'setInterval', 'clearTimeout', 'clearInterval', 'Promise',
High
•matchType = malicious_source_fingerprint_signature
signature = c06bd55d669269cb
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = mdb-vite@1.5.2
matchedPath = index.js
matchedIdentity = npm:bWRiLXZpdGU:1.5.2
similarity = 1.000
shingleOverlap = 1
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
index.jsView on unpkgFindings
2 High1 Medium1 Low
HighEvalindex.js
HighKnown Malware Source Fingerprint Signatureindex.js
MediumNetwork
LowScripts Present
Affected versions and remediation
This report applies to polymarket-trader-apis@2.1.0.
The versions list below shows the verdict for each recorded version.
- Avoid installing polymarket-trader-apis@2.1.0. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Source advisory published: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.