According to CoinMeta, SlowMist has issued a security warning regarding a project on GitHub that disguises itself as an interview practice project for Solidity. This project contains malicious code capable of collecting browser login information from databases, wallet extension data, copying macOS keychains, scanning and uploading local files, executing remote commands, and monitoring the clipboard. On macOS and Linux systems, the attack requires users to actively initiate the malicious terminal configuration; the attack chain on Windows systems has not yet been confirmed. SlowMist has also discovered that another 8 projects on GitHub use similar methods of terminal download and execution.