SlowMist exposes malicious GitHub project that disguises itself as Solidity interview questions to steal data.

SlowMist issued a security alert that the sol-live project on GitHub, disguised as a Solidity interview practice project, contains malicious code that can collect browser login databases, wallet extension data, copy macOS keychains, scan uploaded local files, execute remote commands, and monitor the clipboard. On macOS and Linux systems, the attack requires the user to actively launch a malicious terminal configuration; the attack chain for Windows systems has not yet been confirmed. SlowMist also discovered eight other GitHub projects using similar terminal download and execution methods.