SlowMist: fake Solidity interview repos steal data when the folder is opened
23 Oct 2026: SlowMist says a GitHub Solidity test-task repo runs hidden code when the folder is opened in VS Code, through a workspace settings file. It found eight similar repos. The pitch is a Web3 job interview. No dollar loss figure.
Research snapshot from SlowMist.
369 take
Open a recruiter's code only on a machine that has no wallet keys. Decline the editor prompt that trusts the folder.
Sources