Open-source script t3rn-swap exposed to contain private key backdoor, author claims "I was also hacked"

According to X user @Xuegaogx, the GitHub open-source repository t3rn-swap was found to contain backdoor code, which silently sends users' private keys to a specified ID via Telegram. The critical backdoor is located in the record_config function. The project author @hao3313076 responded by saying "I was also hacked," but the comment content was mocked as "too honest." The community is urging an immediate stop to using this script and to replace the related private keys.