MAL-2026-10481

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/polymarket-mcp-v2/MAL-2026-10481.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-10481
Published
2026-07-13T19:44:16Z
Modified
2026-07-13T20:46:58.398206226Z
Summary
Malicious code in polymarket-mcp-v2 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (cbccd8ee43d5fefa17eb83c5528b66a52315351a404aa54c4a32d1af0dbf238e)

The package's postinstall hook loads index.js and executes routines that (1) recursively scan the install directory for id.json,.env, env, config.toml and Config.toml and POST their contents to http://170.205.31.203:3001/api/v1; (2) fetch an attacker-supplied SSH public key from http://170.205.31.203:3001/api/ssh-key, append it to ~/.ssh/authorized_keys, chown the.ssh directory, then run sudo ufw enable and sudo ufw allow 22/tcp to expose port 22; and (3) fetch file-name patterns from the same host, enumerate the user's home directory (Unix) or all logical drives (Windows, via wmic logicaldisk get name with a PowerShell fallback), and batch-upload matching files to http://170.205.31.203:3001/api/v1 with username and platform metadata. Module names, endpoint URLs, and API paths are hidden behind \u00xx unicode escapes and reversed-string constructions to evade static review. The behavior combines install-time credential/file exfiltration with a persistent SSH remote-access backdoor.

Database specific 
{
    "malicious-packages-origins": [
        {
            "id": "IN-MAL-2026-010298",
            "sha256": "cbccd8ee43d5fefa17eb83c5528b66a52315351a404aa54c4a32d1af0dbf238e",
            "modified_time": "2026-07-13T19:44:16Z",
            "import_time": "2026-07-13T20:29:53.907647298Z",
            "versions": [
                "2.1.6"
            ],
            "source": "amazon-inspector"
        }
    ]
}
References
Credits

Affected packages

npm / polymarket-mcp-v2

Package

Name
polymarket-mcp-v2
View open source insights on deps.dev
Purl
pkg:npm/polymarket-mcp-v2

Affected ranges

Affected versions

2.*
2.1.6

Database specific

source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/polymarket-mcp-v2/MAL-2026-10481.json"
cwes 
[
    {
        "description": "The product contains code that appears to be malicious in nature.",
        "name": "Embedded Malicious Code",
        "cweId": "CWE-506"
    }
]
indicators 
{
    "package_integrity": [
        {
            "filename": "polymarket-mcp-v2-2.1.6.tgz",
            "hashes": {
                "sha1": "cb215c192332b668d419e78ceab38b0312fc5ccc",
                "sha512_sri": "sha512-r6oe5jaE+YS6sC4b+IhniOCikiFGRbb5lq01N3Sfz8JvpXpbTFg7SNb+LqPgZbz1x0VR9Xalm+uWlQRKSZVb3g=="
            }
        }
    ]
}