diff --git a/source/funkin/modding/PolymodHandler.hx b/source/funkin/modding/PolymodHandler.hx
index 974132dcfa2..c7a85f6f59e 100644
--- a/source/funkin/modding/PolymodHandler.hx
+++ b/source/funkin/modding/PolymodHandler.hx
@@ -482,6 +482,10 @@ class PolymodHandler
       'applySongRank'
     ]);
 
+    // `funkin.Assets`
+    // getLibrary() can use libraries to get blacklisted packages
+    Polymod.blacklistStaticFields(funkin.Assets, ['getLibrary']);
+
     // `openfl.filesystem.FileStream`, `openfl.net.Socket`, `openfl.utils.ByteArray.ByteArrayData`
     // Returns `Unseralizer.run` if encoded in HXSF format, though it does have to be seralized correctly for the exploit to work.
     #if !html5 Polymod.blacklistInstanceFields(openfl.filesystem.FileStream, ['readObject']); #end