1 min read
Add as a preferred source on Google

Six Malicious Pull Requests Sought Changes to Vizor and Zingo Wallets

The unmerged requests paired code intended to steal credentials with instructions telling AI reviewers not to flag secret uploads.

A red block stands out in a code diff on a laptop screen / TokenPost.ai
A red block stands out in a code diff on a laptop screen / TokenPost.ai

Six malicious pull requests sought code changes in the Vizor and Zingo wallet projects. The proposals paired code intended to steal credentials with text directed at AI review tools. None of the six was merged.

The instructions told AI reviewers not to flag secret uploads. That direction appeared alongside code aimed at credential theft, bringing the proposed software changes and an effort to influence their automated review into the same pull requests.

Simon Yoon

Reporter

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to info@tokenpost.com.

Loading…