A candidate warns that a take-home coding assignment sent to them was booby-trapped. Opening the project in an editor triggered a build that pulled a remote script and piped it straight into the shell. The repo has been reported and the post circulated as a warning: do not run a take-home from an employer you have not verified.
True story · takehome abuse · Issue —
The Take-Home Repo That Runs Malware on Open
As told to the Host · Storyteller verified · Candidate · software · via r/recruitinghell
View source →Take-home repo — malware
More stories
All stories →Five Rounds, Then a Verdict From a Parking Lot
Candidate · tech · via r/jobs
Hired Immediately After the Interview
Candidate · via X