Received a link to this repo as a "test task". There's a malicious code that gets automatically downloaded from the api and executed on victim's machine.
https://bitbucket.org/dev_ek/ek-metaverse/src/466b04cd0706b0020fbf360b0263f2dc944b1fee/server/controllers/orderController.js#lines-129
Hey @Andrew Katsewich ,
Just dropping an update here, the repository and workspace in question was taken down.
Thank you very much for reporting this!
Patrik S
Forward it to https://www.atlassian.com/trust/report-abuse and the team will deal with it.
Doesn't seem so, a week later and still no reply about another repo I got, reporting it here gives results much faster yet again.
It looks like you're new here. Sign in or register to get started.
