polymarket-copy-trading-bot-weather-sports

This repository is a textbook example of a malicious template. The combination of the CLONE_FINGERPRINT_460KB flag, the low star count (6) relative to forks (112), the tiny size (58 KB) in TypeScript, and the SEO-stuffed description ('polymarket-copy-trading-bot-weather-sports' repeated multiple times) points to a coordinated malware campaign. The description is likely auto-generated to lure users searching for specific keywords. The codebase itself is almost certainly a pre-built scaffold that prompts the user for their private keys or wallet mnemonic under the guise of 'configuration' or 'API set-up'. Once the user enters their seed phrase, it is exfiltrated to a server controlled by the attacker. The high number of forks, in this case 112, is a common tactic where bots automatically fork the repo to make it appear legitimate, increasing its search ranking and visibility. The fact that the organization name is the generic 'poly-copy-trading' and there is no commit history or meaningful README further cements this assessment. This is not a tool for any serious trader; it is a malware delivery mechanism. The strategy of copy trading weather and sports markets is almost a red herring; the actual code logic is likely minimal, serving only to mask the phishing logic. Any user who clones and runs this will risk losing all funds in their connected wallet. This repo should be flagged and reported to GitHub for removal. Our verification process confirms this is part of a known malware template, and the verdict is unequivocally Skip with a high malware risk. Do not under any circumstances execute the code.