The Polymarket Trap: A Fake Arbitrage Bot, Ten npm Accounts, and Four Ways to Deliver an Infostealer

A coordinated npm supply chain attack leveraged ten fake maintainer accounts and four advanced delivery techniques to distribute an infostealer targeting DeFi developers, harvesting crypto wallets, credentials, and sensitive developer secrets through malicious packages masquerading as legitimate Polymarket and DeFi tooling.