Bollcoin, October 23 — SlowMist has issued a security warning, saying it recently received user reports that a GitHub repository named sol-live, disguised as a Solidity interview practice project, hides malicious code. The malicious payload contains three main modules capable of collecting browser login databases and wallet extension storage data, copying macOS Keychain files, and scanning and uploading local files; it can also execute remote commands, provide interactive Shell access and monitor clipboard contents. SlowMist said that on macOS and Linux systems, the attack requires users to actively launch the malicious terminal configuration; the attack chain on Windows has not been confirmed. In addition, SlowMist found 8 other GitHub projects using a similar terminal download-and-execute technique.