Received a link to this repo as a "test task". There's a malicious code that gets automatically downloaded from the api and executed on victim's machine.
https://bitbucket.org/dev_ek/ek-metaverse/src/466b04cd0706b0020fbf360b0263f2dc944b1fee/server/controllers/orderController.js#lines-129
Hey @Andrew Katsewich ,
Just dropping an update here, the repository and workspace in question was taken down.
Thank you very much for reporting this!
Patrik S
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Forward it to abuse@atlassian.com and the team will deal with it.
Doesn't seem so, a week later and still no reply about another repo I got, reporting it here gives results much faster yet again.
Still have a question?
Get fast answers from people who know.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.