Slow Mist: GitHub Solidity Interview Project Conceals Stealing Backdoors, There are already 8 Similar Projects According to Golden Finance, on October 23rd, according to fog threat intelligence, a GitHub repository called sol live disguised as a Solidity interview practice project, hidden in. vscode/settings. json, downloaded and executed remote script commands, which may trigger malicious payloads when users launch custom terminal configurations. SlowMist Analysis states that the malicious payload can collect browser login databases, wallet extended storage, and macOS Keychain files, and has the ability to scan and upload local files, execute remote commands, provide interactive shell access, and monitor the clipboard; MacOS and Linux require users to actively initiate malicious terminal configuration before execution, and the issue of quotation mark handling in the Windows attack chain has not been confirmed yet. SlowMist has discovered 8 GitHub projects that use a similar approach, but it is not yet possible to confirm the scope of infection or whether there has been a data leak. It is recommended that users check. vscode/settings. json and terminal startup parameters before running untrusted projects. If they have been executed, they should be isolated and checked, and wallet assets should be migrated and credentials updated on trusted devices.