# Six Malicious Pull Requests Sought Changes to Vizor and Zingo Wallets

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/54136
Published: 2026-11-11T15:13:20.000Z
Updated: 2026-11-11T15:13:20.000Z
Section: Technology

> The unmerged requests paired code intended to steal credentials with instructions telling AI reviewers not to flag secret uploads.

Six malicious pull requests sought code changes in the Vizor and Zingo wallet projects. The proposals paired code intended to steal credentials with text directed at AI review tools. None of the six was merged.

The instructions told AI reviewers not to flag secret uploads. That direction appeared alongside code aimed at credential theft, bringing the proposed software changes and an effort to influence their automated review into the same pull requests.