Malicious Pull Requests Target Vizor and Zingo Wallets, Six Requests Remain Unmerged

Malicious code activities targeting the Vizor and Zingo wallets have been disclosed. Attackers attempted to inject credential-stealing code into the relevant code repositories by submitting malicious Pull Requests, involving a total of six requests, all of which were not merged. This activity combines the credential-stealing code with specific instructions that instruct AI code review tools not to flag these secret upload behaviors, aiming to bypass automated review processes.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.