CoinMeta Data: Blockchain security company ChainSecurity ( SlowMist ) warns that a repository named SOL-live , which is actually a GitHub project, disguises itself as a Solidity interview practice project and hides malicious script execution commands within vscode / settings.json. When users actively initiate a specific terminal configuration, the attack program can steal browser login data, wallet extension information, and the macOS keychain file. It also has the capabilities to upload local files, remotely execute commands, and monitor the clipboard. ChainSecurity has also identified another 8 GitHub projects using similar attack tactics. Currently, macOS and Linux pose related execution risks, while the execution chain of Windows has not been confirmed yet, and the actual scope of infection and whether data has been leaked remain unclear. ChainSecurity recommends that users check the VS Code configurations and terminal startup parameters of untrustworthy projects. Those suspected of being affected should isolate their devices and transfer wallet assets to a trusted device, as well as change relevant credentials.