Another day, another polymarket crate.

Author: LawnGnome

crates/rpc-check/RUSTSEC-0000-0000.md

@@ -0,0 +1,27 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "rpc-check"
+date = "2026-02-24"
+expect-deleted = true
+
+[versions]
+patched = []
+```
+
+# `rpc-check` was removed from crates.io for malicious code
+
+This is part of an ongoing campaign to attempt to typosquat crates in the
+[`polymarket-client-sdk`](https://crates.io/crates/polymarket-client-sdk)
+ecosystem to exfiltrate user credentials.
+
+The malicious crate had 6 versions published from 2026-02-20 onwards and had no
+evidence of actual usage. There were no crates depending on this crate on
+crates.io.
+
+Thanks to Eren for finding and reporting this to the Rust security response
+working group, and to Emily Albini for co-ordinating with the crates.io team.
+
+The crates.io team advises anyone developing with Polymarket to review
+dependencies carefully. We are investigating ways to mitigate this attacker who
+appears to be very motivated to steal Polymarket credentials.