Security· ★★★· bearish·

SlowMist flags fake Solidity GitHub repo hiding wallet-stealing backdoor

  • —The sol-live repo masquerades as Solidity interview practice material
  • —Payload steals browser credentials and wallet extension storage
  • —On macOS and Linux the attack requires running a malicious terminal config
  • —SlowMist found eight more GitHub projects using similar download-and-execute tactics
Why it matters: Developers and traders routinely run code from GitHub, so a malicious repo can lead to stolen keys and drained wallets.
Source: PANews
More on this
Security · Sep 21
Fake LastPass GitHub repos spread Rapuncel infostealer
 Security · Oct 10
SlowMist: Ledger device found with spy implant stealing seed phrases via screen
 Security · Sep 29
SlowMist: Apple patches zero-day used to steal crypto wallets