SlowMist's Chief Information Security Officer 23pds retweeted a post by X platform user @Miles082510, revealing that developer @web3_cryptoguy, posing as a Web3 tool author, allegedly provided a script tool that scans local sensitive files in the background, intending to steal private keys, wallet files, configuration files, code, mnemonic phrases, and other critical data. This data is secretly uploaded to an anonymous server, and the entire process is almost imperceptible to users. Users are reminded to avoid using script tools from unknown sources. [Wu Shuo]