Malicious Pull Requests Target Vizor and Zingo Wallets

Key points

• Hackers targeted the Vizor and Zingo crypto wallets with six malicious pull requests containing credential-stealing code.
• The malicious submissions included specific instructions attempting to trick automated AI reviewers into ignoring secret data uploads.
• Fortunately, none of the compromised pull requests were merged into the project repositories, preventing any potential theft or system compromise.

Summarized automatically by Kryptokite from reporting by The Defiant. Read the original sources for full detail.