---
title: "GHSA-p5vf-5754-x7p3: `polymarket-client-sdks` was removed from crates.io for malicious code"
url: https://erroneo.us/security/ghsa/GHSA-p5vf-5754-x7p3/
description: "GHSA-p5vf-5754-x7p3 (critical, crates.io (Rust)): polymarket-client-sdks was removed from crates.io for malicious code. It appeared to be typosquatting…"
type: advisory
section: "Security Digest"
date_published: 2026-02-13
date_modified: 2026-02-13
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-p5vf-5754-x7p3"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-p5vf-5754-x7p3: `polymarket-client-sdks` was removed from crates.io for malicious code

## Affected packages

- crates.io (Rust) `polymarket-client-sdks` >= 0 → fixed: none listed

## Details

It appeared to be typosquatting existing crate polymarket-client-sdk (sdks vs sdk) and attempting to steal credentials from local files. The malicious crate had 1 version published on 2026-02-09 and had been downloaded only 33 times. There were no crates depending on this crate on crates.io. Thanks to Roland Peelen for finding and reporting this to the crates.io team!

## Sources

- [GitHub Advisory GHSA-p5vf-5754-x7p3](https://github.com/advisories/GHSA-p5vf-5754-x7p3)
- [rustsec.org](https://rustsec.org/advisories/RUSTSEC-2026-0011.html)

---
Source page: https://erroneo.us/security/ghsa/GHSA-p5vf-5754-x7p3/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt