Malicious Pull Requests Target Vizor and Zingo Wallets

None of the six requests was merged; the campaign paired credential-stealing code with instructions telling AI reviewers not to flag secret uploads.
This is the summary The Defiant publishes in its feed. The full article lives on their site.