Security Alert: Malicious Projects Disguised as "Copy Trading Bots" on GitHub Stealing Private Keys
Show original
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold. Trade now!
A welcome pack worth 6200 USDT for new users! Sign up now!
Jinse Finance reported that the GitHub project polymarket-copy-trading-bot has been implanted with malicious code. When the program is launched, it automatically reads the user's .env file for the wallet private key and transmits it to the hacker's server through a hidden malicious dependency package excluder-mcp-package@1.0.4, resulting in asset theft.
0
0
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
Understand the market, then trade.
Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.
Trade now！
You may also like
Exodus' 'cost reset is real' as payments offset crypto wallet slowdown, StoneX says
The Block•2026/11/12 18:06
Crypto prices
More
Bitcoin
BTC
$71,539.2
-3.69%
Ethereum
ETH
$2,010.54
-3.14%
Tether USDt
USDT
$0.9988
-0.01%
BNB
BNB
$653.56
-4.82%
USDC
USDC
$0.9997
-0.00%
XRP
XRP
$1.03
-3.10%
Solana
SOL
$81.38
-3.87%
TRON
TRX
$0.3155
-0.40%
Hyperliquid
HYPE
$71.16
-2.87%
Zcash
ZEC
$940.29
-4.79%
How to buy BTC
Bitget lists BTC – Buy or sell BTC quickly on Bitget!
Trade now
Become a trader now?A welcome pack worth 6200 USDT for new users!
Sign up now