SocialTalkX Crypto and market news, checked against sources and prices

Live · updated 4 minutes ago · 87 stories in 24h

← Stream
Hacks & Security Unverified First seen

SlowMist warns fake Solidity interview repo hides data-stealing backdoor

SlowMist reports that users flagged a GitHub repository named sol-live, presented as a Solidity interview practice project, which contains a hidden download-and-execute command in .vscode/settings.json. SlowMist says the retrieved payload collects browser login databases, wallet extension storage and macOS Keychain files, scans and uploads local files, and executes remote commands with interactive shell access and clipboard monitoring. SlowMist states that on macOS/Linux execution requires users to actively launch the malicious terminal configuration, while the Windows execution chain remains

Why “Unverified”

  • Reported by SlowMist alone, with no second source or primary confirmation yet

1 independent source group across 1 post · evidence score 72/100. How labels work

What the sources claim

  1. SlowMist says a GitHub repo named sol-live, presented as a Solidity interview practice project, hides a download-and-execute command in its VS Code settings.

    “a GitHub repository named sol-live, presented as a #Solidity interview practice project”
    SlowMist

  2. SlowMist says the payload collects browser login databases, wallet extension storage and macOS Keychain files.

    “Collecting browser login databases and wallet extension storage, and copying #macOS Keychain files”
    SlowMist

  3. SlowMist says the payload can execute remote commands, provide interactive shell access and monitor clipboard contents.

    “Executing remote commands, providing interactive shell access, and monitoring clipboard contents”
    SlowMist

  4. SlowMist says execution on macOS/Linux requires users to actively launch the malicious terminal configuration.

    “On macOS/Linux, execution requires users to actively launch the malicious terminal configuration”
    SlowMist

  5. SlowMist says the Windows execution chain remains unconfirmed due to potential quoting issues.

    “The #Windows execution chain remains unconfirmed due to potential quoting issues”
    SlowMist

  6. SlowMist says it identified 8 other GitHub projects using similar terminal-based download-and-execute techniques.

    “We also identified 8 other #GitHub projects with similar terminal-based download-and-execute techniques”
    SlowMist

Sources

More in Hacks & Security

All Hacks & Security stories →

Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-24 00:00 UTC. Labels are computed from the sources, not by the model.