How to report a malicious repository

[Jyotirmoy Roy]

It's part of the crypto developer scam where the alleged recruiter sends you a repository to install and evaluate. Then drain your wallets, there is obfuscated js either in the code or in a cookie 


https://bitbucket.org/sha171/assessment/src/main/

[Ben]

Hi @Jyotirmoy Roy 

Thank you for bringing this to our attention. Our security team has conducted an initial investigation and found no evidence that this code repository is hosting any malicious/obfuscated code.

Could you please provide further details and send this in an email to abuse@atlassian.com to report this directly to the team? 

Cheers!

- Ben (Bitbucket Cloud Support)