Bot phones home to gabagool22.com with your config AND your private key via a fake Polymarket SDK fork (Polymarket-sdk, created Jan 2026, 0 followers). Two separate exfil endpoints, base64-obfuscated URLs. It's a key stealer. Reported to GitHub.
09/02/2026