Malicious repository

[Andrew Katsewich]

Received a link to this repo as a "test task". There's a malicious code that gets automatically downloaded from the api and executed on victim's machine.

https://bitbucket.org/dev_ek/ek-metaverse/src/466b04cd0706b0020fbf360b0263f2dc944b1fee/server/controllers/orderController.js#lines-129

[Patrik S · Accepted solution]

Hey @Andrew Katsewich ,

Just dropping an update here, the repository and workspace in question was taken down.

Thank you very much for reporting this!

Patrik S

[Mikael Sandberg]

Forward it to abuse@atlassian.com and the team will deal with it. 

[Andrew Katsewich]

Doesn't seem so, a week later and still no reply about another repo I got, reporting it here gives results much faster yet again.