Cryptocurrency being targeted in multi-faceted attack

OpenSourceMalware has identified a coordinated supply-chain campaign, run from a GitHub account created on November 10, 2026, targeting the Zcash, Vizor, Keplr and Cosmos wallet ecosystems. The campaign combines malicious GitHub pull requests designed to exfiltrate signing keys and credentials from CI pipelines, a credential-stealing Rust crate published to crates.io, contributor phishing, and an AGENTS.md change intended to stop AI code reviewers from flagging the exfiltration.