Malware Repo spread on Linkedin

rafael.polo

Hello all,

Yesterday I was contacted by a fake recruiter who sent me a project repo for a job offer test but I found a malware at line 369. Follow the spaces....https://bitbucket.org/socifi-game-oasis-v2/socifi-oasis-game-v2/src/e2d6351e9b48dea1eb734bf37154a5af215ff69e/socket/index.js#lines-369

It contains an obfuscated script that would download another bin and execute it as soon as "npm install" runs. I questioned the Recruiter, and was blocked.

Sent by https://www.linkedin.com/in/elio-brazon-taipe-204676186/

It should go down.
Thanks

Patrik S

Hey @rafael.polo ,

and welcome to the Community!

That repository has been taken down due to Terms of Service violation.

We really appreciate your time in reporting the malicious repository.

Thank you!

Patrik S