Cos(余弦)😶‍🌫️(@evilcos ):注意⚠️这个代码仓库是带毒的，如果你被诱骗（不管是面试借口还是其它）本地克隆并执行，你的钱包助记词文件、浏览器登录会话等敏感信息就会被偷走… 最近这种带毒代码/程序越来越多，如果你拿捏不好，可以发我，我来以身试毒😂

2025.08.09 04:51

注意⚠️这个代码仓库是带毒的，如果你被诱骗（不管是面试借口还是其它）本地克隆并执行，你的钱包助记词文件、浏览器登录会话等敏感信息就会被偷走… 最近这种带毒代码/程序越来越多，如果你拿捏不好，可以发我，我来以身试毒😂

2025.08.09 04:30

🚨SlowMist TI Alert🚨 A community member recently reached out after interviewing with a Web3 team claiming to be from Ukraine. In the first round, he was asked to clone a GitHub repo locally — he wisely refused.🧑‍💻 🔍Our analysis revealed the repo contains a backdoor: github[.]com/EvaCodes-Community/UltraX 💥If cloned & executed, it would load malicious code, install a malicious dependency rtk-logger@1.11.5 (created 2025-08-08), harvest sensitive browser & wallet data (e.g., Chrome extension storage, possible seed phrases, session tokens) and📤exfiltrate them to the attacker’s server. ⚠️This is a job-offer-as-a-trap scam. Stay vigilant — never run unverified code from unknown sources.