1 min read
Six Malicious Pull Requests Sought Changes to Vizor and Zingo Wallets
The unmerged requests paired code intended to steal credentials with instructions telling AI reviewers not to flag secret uploads.

Six malicious pull requests sought code changes in the Vizor and Zingo wallet projects. The proposals paired code intended to steal credentials with text directed at AI review tools. None of the six was merged.
The instructions told AI reviewers not to flag secret uploads. That direction appeared alongside code aimed at credential theft, bringing the proposed software changes and an effort to influence their automated review into the same pull requests.