A secret malicious software activity is hijacking encrypted wallets by embedding malicious code in fake open source projects on Github, deceiving developers into executing hidden payloads.

A network attack activity called Gitvenom has been attacking Github users by embedding malicious code in seemingly legitimate open source projects. Researchers Georgy Kucherin and Joao Godinho discovered this operation, where cybercriminals create fraudulent repositories that mimic real software tools. The way in which the malicious code is embedded varies depending on the programming language used in the fake projects.