SlowMist: Beware of malicious GitHub repositories disguised as Solidity interview practice projects that can steal wallet data.
6 days ago
SlowMist has issued a security alert, stating it received user reports of a GitHub repository named "sol-live" disguised as a Solidity interview practice project that actually harbors a data-stealing backdoor. According to analysis, attackers embedded malicious commands in the repo files, which can download and execute remote scripts when the project’s custom terminal configuration is launched. The malicious payload includes three core modules: collecting browser login databases, crypto wallet extension storage, and macOS Keychain files; scanning and uploading local files; and executing remote commands, providing interactive shell access, and monitoring clipboard content. SlowMist noted that on macOS and Linux systems, the attack chain requires users to actively launch the malicious terminal configuration to execute, while the execution chain on Windows remains unconfirmed due to potential quotation mark issues. Additionally, researchers found 8 other GitHub projects using similar terminal configuration download-and-execute techniques, though the actual infection scope and whether data has been exfiltrated are still unconfirmed. SlowMist advises developers to carefully check files and terminal launch parameters before using untrusted projects. If a malicious configuration has been executed, or if the host’s compromise cannot be ruled out, immediately isolate the relevant device and conduct a security investigation. At the same time, migrate wallet assets via a trusted device and replace related account credentials to reduce the risk of further losses.
Alipay: Unauthorized peers are trading USDC via its platform, and users are advised to remain vigilant.
1 minutes ago
Samsung's Q3 financial results: Net profit of 75.2 trillion won missed expectations, and the company will distribute 30 trillion won in dividends.
1 minutes ago
Google’s Gemini 4 Carbon Returns to Top Tier, Surpasses Opus 5.5 to Top the AA Intelligence Index Ranking
1 minutes ago
HyperLabs applies to redeem approximately 180,000 HYPE tokens, valued at around $14.49 million.
1 minutes ago
Decentralized liquid staking protocol Diva announces it will shut down and will not launch its mainnet.
1 minutes ago
South Korea's KOSPI index gains 1% intraday, with SK Hynix opening more than 3% higher.
1 minutes ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

