Recruiter’s Take‑Home Assignment Laced with Git‑Hook Malware
A candidate received a high‑pay Python contract via a LinkedIn recruiter, only to discover the zip archive contained hidden Git hooks that could execute arbitrary code on the applicant’s machine. The post shows the full directory tree and explains how the malicious hooks work, warning developers to scrutinize take‑home projects. This highlights a new attack vector in remote hiring.