GitHub | Crypto

A fake GitHub repository posing as a Solana trading bot was used to distribute obscured malware that stole crypto wallet credentials, according to cybersecurity firm SlowMist. A GitHub repository posing as a legitimate Solana trading bot has been exposed for reportedly hiding crypto-stealing malware. According to a Friday report by blockchain security firm SlowMist, the now-deleted solana-pumpfun-bot repository hosted by account “zldp2002” mimicked a real open-source tool to harvest user credentials. SlowMist reportedly launched the investigation after a user found that their funds had been stolen on Thursday. The malicious GitHub repository in question featured “a relatively high number of stars and forks,” SlowMist said. All code commits across all its directories were made about three weeks ago, with apparent irregularities and a lack of consistent pattern that, according to SlowMist, would indicate a legitimate project. Read more

Hype moves fast, but real crypto innovation is quieter. Use GitHub, Discord and X to spot legitimate projects before they moon or rug. Real crypto projects show consistent GitHub activity, open development and active contributors, not abandoned repos or marketing fluff. Discord can reveal a project’s true momentum through developer interaction, roadmap updates and community-led feedback. X offers direct access to protocol founders and devs; follow conversations, not influencers, to catch real signals early. Read more