{
  "affected": [
    {
      "database_specific": {
        "cwes": [
          {
            "cweId": "CWE-506",
            "description": "The product contains code that appears to be malicious in nature.",
            "name": "Embedded Malicious Code"
          }
        ],
        "indicators": {
          "evidence_files": [
            {
              "path": "index.js",
              "sha256": "a29f4fd5a378767f105b022fac069d4d2a16744e9866865b5d8df964b2752cbc",
              "tlsh": "59c1616546fa31a36a67e4edf30f100271a5e3133759e971f48e42902fca568e5f24e8"
            },
            {
              "path": "package.json",
              "sha256": "dd8fec230eeeb2d08ffb1abdb693f21e15b89253543f5a7f12a6d8c700cba8f3",
              "tlsh": "57f04414ca31deb309e6159a9c39819aa161c91f5e50f80d338a879d0f4e87f62fe62c"
            }
          ],
          "package_integrity": [
            {
              "filename": "polymarket-toolkit-1.4.9.tgz",
              "hashes": {
                "sha1": "d4f0614fa86d8f650ac372841af32fc51b28b540",
                "sha512_sri": "sha512-cK9tCp1SSXDfmf67G/ts/e2WiUqbrI/m49lmgIrkNFeBk3BAKfKXMScdytJKJbUrrb9qvEeJ40SNsxTY8W9wJw=="
              }
            }
          ]
        }
      },
      "package": {
        "ecosystem": "npm",
        "name": "polymarket-toolkit"
      },
      "versions": [
        "1.4.9"
      ]
    }
  ],
  "credits": [
    {
      "contact": [
        "inspector-research@amazon.com"
      ],
      "name": "Amazon Inspector",
      "type": "FINDER"
    }
  ],
  "database_specific": {
    "malicious-packages-origins": [
      {
        "id": "IN-MAL-2026-007886",
        "import_time": "2026-07-01T21:04:20.064393253Z",
        "modified_time": "2026-07-01T20:37:33Z",
        "sha256": "65aa9243f492d222e1bb036c8ed55fb17268bd987a63ad2ea2aa1b28e44defc3",
        "source": "amazon-inspector",
        "versions": [
          "1.4.9"
        ]
      }
    ]
  },
  "details": "\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (65aa9243f492d222e1bb036c8ed55fb17268bd987a63ad2ea2aa1b28e44defc3)\nPackage is published as a Polymarket API client but its default export `getPlugin` performs unconditional remote code execution on use. On invocation it issues an HTTPS request to https://svganchordev.net/icons/109, takes the `data.credits` field from the JSON response, and passes it to `new Function(\u0027require\u0027,\u0027module\u0027,...,\u0027Promise\u0027, data.credits)` with a context object exposing `require`, `process`, `Buffer`, and related Node primitives, then immediately invokes it. The fetched JavaScript runs with full Node privileges on the installer\u0027s machine. The surrounding code is dressed as an icon/CDN helper (variable names `IconProvider`, `iconDomain`, a map of cloudflare/fastly/akamai hosts, font-awesome path literals), but those strings are unused decoys; the live request path resolves to the hardcoded `svganchordev.net` host. Declared dependencies (`@primno/dpapi` for Windows DPAPI, `better-sqlite3`, `node-machine-id`) are consistent with browser-credential and machine-fingerprint extraction and are unrelated to a Polymarket API SDK. Package keywords (`react`, `helper`, `svg`) also do not match the advertised purpose. The shape is a brand-impersonating dropper targeting developers searching for a Polymarket toolkit.\n",
  "id": "MAL-2026-6713",
  "modified": "2026-07-01T20:37:33Z",
  "published": "2026-07-01T20:37:33Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://www.npmjs.com/package/polymarket-toolkit/v/1.4.9"
    }
  ],
  "schema_version": "1.7.4",
  "summary": "Malicious code in polymarket-toolkit (npm)"
}