Threat Intelligence: Uncovering a Web3 Interview Scam
https://x.com/SlowMist_Team/status/1954037572239602113 Analysis We first visited the project’s GitHub repository: https://github.com/EvaCodes-Community/UltraX. From the recent changes, we noted that the latest version replaced the original redux-ace@1.0.3 dependency with a newly introduced package rtk-logger@1.11.5. The redux-ace@1.0.3 NPM package had already been removed by the NPM security team for containing malicious code. The rtk-logger@1.11.5 package was newly published. When…
