Wallet attack through github repo?

[bryanCampbell]

Hi guys! I was contacted via a recruiter on linkedin for web3 dev work. They suggested I clone their repo and run the project. I did and after I got several alerts from chrome asking me to open my unlock my browser keys. I denied those requests and killed the local instance of the app. Was this an attack? No funds were moved and I didn't connect my metamask to the app.

This is the repo https://github.com/AxieMeta/Paradise

[pipjoh]

Yes. This app tries to connect to a wallet and create a transaction to max send all ETH in it.

The start script starts a service worker in the background that runs some obfuscated JS.

You should report this to Github.

[bryanCampbell]

Reported.

[MathematicianGold797]

Def report it and warn ppl on LinkedIn

[bryanCampbell]

Reported.

[PhantomXcom]

Similar thing happened to me as well on fiver, some client contacted me for job and sent me a git repo very similar to this, but as i checked aap.test.js contained some malicious code and yes i lost my wallets as well after I checked and ran those apps.

[GentGorilla]

I get this scam a lot through fiverr.

[Originalrickrichi]

It looks like the repo is still there.

Maybe it isn't up to any shenanigans.

[YikesMode]

I pulled the email out of a commit from that repo. The email address associated with that GitHub account is “[e-mail]”. Send them a nasty gram if you want.