Malicious pull request inserted into Ethereum code extension: research

ReversingLabs detected harmful code within an ETHCode update, hidden to elude detection by AI and human reviewers. Despite concerns, there’s no proof of data theft.

Ethereum developers are now urged to improve scrutiny over open-source installations and practices. This incident emphasizes the necessity for vigilant code reviews to mitigate security risks.