Malicious Pull Requests Target Vizor and Zingo Wallets
None of six malicious pull requests was merged; the campaign paired credential-stealing code with instructions to AI reviewers not to flag secret uploads.
Malicious actors submitted six pull requests targeting the Vizor and Zingo wallets, according to TheDefiant. None of the requests was merged, and no funds were reported stolen.
Attack Method
Instant Telegram notifications for large on-chain moves.
The campaign paired credential-stealing code with instructions telling AI reviewers not to flag secret uploads, the outlet reported. The requests sought to introduce harmful code into wallet repositories without detection.
Key facts
- Six malicious pull requests targeted Vizor and Zingo wallets
- None of the requests was merged
- Code included credential-stealing functionality
- Reviewers were instructed not to flag secret uploads
- TheDefiant published the report
Source: thedefiant.io
This article is for information only and is not investment advice. BullishMarketCap news is produced with AI assistance from public sources and reviewed by our editors; see our editorial policy. Spotted an error? Tell us.
