Scam Alert: Victims Lose Crypto to Malicious Solana Bot on GitHub

Key Points

1. SlowMist identified a fake Pump.fun bot on GitHub that drains crypto wallets after users download and run it.

2. The malicious package bypassed NPM registry security checks by using a custom GitHub link.

3. The hacker artificially boosted the project's credibility using fake GitHub accounts to simulate popularity.

4. SlowMist advises users to exercise caution and not blindly trust GitHub projects to avoid such scams.