Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

How do I report a malicious repository?

bennyn
April 14, 2026

I was contacted by someone posing as a recruiter on LinkedIn with a well-paid job offer. They asked me to complete a take-home task linked in a Google Doc, which references a Bitbucket repository containing malicious code that performs remote code execution. How can I report the malicious repository (https://bitbucket.org/top-hvd-2025/hvd-bard-2026)?

2 answers

1 vote
Mikael Sandberg
Community Champion
April 14, 2026

Hi @bennyn,

Welcome to Atlassian Community!

Send an email to abuse@atlassian.com with the information and that team will deal with it. Please note that you will not get a response back, but they will investigate. 

0 votes
Andrew Phillips
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
April 14, 2026

Report it directly to Atlassian (Bitbucket)


Open repo → Report/Flag repository → choose malware/phishing


Or submit via Atlassian support with:


Repo URL


Screenshots


LinkedIn + Google Doc links

 


Also report the LinkedIn recruiter as scam/phishing and block them.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
TAGS
AUG Leaders

Atlassian Community Events