Damn, I thought LinkedIn itself got hacked, but that's just "recruiter" trying to get people to install malicious npm modules. ๐ฅฑ
Good heads up tho, I periodically get folks trying some bullshit with me in there like "let's talk on WhatsApp".
this post was submitted on 15 Jun 2026
94 points (99.0% liked)
Technology
85515 readers
4226 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
Yikes, this is spooky stuff.
In the blog post, the author mentioned that their AI agent found the malicious payload.
That reminded me of people writing malicious AI prompts. I find it shocking , that you really cannot trust 3rd party code and cannot safely use AI as a tool to quickly audit said code.
I wonder if interviewing will come full circle and we'll go back to resumes, phone interview, then in-person interviews. Rather, than the whole "take home project" crap (well... at least I have another reason to opt of them).
I think there will be some inventions in regard of "take home projects" like certification of said tasks, secure repositories - things that let you easily check if whatever you just got is legit, or maybe in-browser environments for doing tasks, where it's all handled on employers servers. Just takes someone to formulate an idea that could be sold and rest is details.
And as of resumes, phone interviews and in-person interviews - kinda happened already, at least speaking from my engineer's perspective. Today just hiring someone without in-person interview is a bit foolish due to how easy it is to just open ChatGPT tab or whatever on another screen. And potential engineers then are invited to an in-person interview and fail it miserably after giving somewhat competent answers in online call.
I thought getting farmed for my resume was bad.
I just went through this same deal on LinkedIn, only I told the "recruiter" I'd need to verify with the company this is standard practice (which I did, I emailed corporate). The account vanished within a few hours of me sending that msg. Same as the article, I reported the repo to GitHub and as far as I can tell the organization and accounts associated with it are still online.
Typical DPRK-Move.