A malicious software hijacks encrypted wallets by embedding code in a fake open source project on Github

According to News.bitcoin, a covert malware campaign is hijacking encrypted wallets by embedding malicious code in fake open source projects on Github, enticing developers to execute hidden payloads. A cyber attack called Gitvenom has been attacking Github users by embedding malicious code into seemingly legitimate open source projects. Researchers Georgy Kucherin and Joao Godinho discovered that cybercriminals create fraudulent repositories that mimic real software tools. The embedding method of malicious code varies depending on the programming language used in the fake project.