/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}.signal-live-strip{display:flex;align-items:center;gap:.625rem;min-height:44px;margin-bottom:1rem;padding:.4rem .875rem;border-radius:9999px;border:1px solid rgba(var(--color-border-rgb,148,163,184),.35);background:rgba(var(--color-surface-rgb,15,23,42),.6);backdrop-filter:blur(12px) saturate(140%);overflow:hidden}.signal-live-badge{display:inline-flex;align-items:center;gap:.35rem;flex:0 0 auto;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.68rem;font-weight:700;letter-spacing:.08em;text-transform:uppercase;color:#fda4af}[data-bs-theme=light] .signal-live-badge,body.light .signal-live-badge{color:#be123c}.signal-live-dot{width:8px;height:8px;border-radius:50%;background:#f43f5e;animation:1.6s ease-in-out 0s infinite normal none running signalLivePulse}.signal-live-strip.is-online .signal-live-dot{background:#22c55e;animation:auto ease 0s 1 normal none running none}.signal-live-item{font-size:.82rem;line-height:1.35;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}.menue-widget .nav-tree-link{min-width:44px;display:flex;align-items:center;word-break:break-word;overflow-wrap:anywhere;max-width:100%;min-height:44px!important}.menue-widget .nav-title-text{overflow-wrap:anywhere;word-break:break-word}.menue-widget .menue-widget-btn{min-height:44px;min-width:44px;display:inline-flex;align-items:center;justify-content:center}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:auto ease 0s 1 normal none running none;transition:none}}.ticker-track{animation:auto ease 0s 1 normal none running none!important}.ticker-content{cursor:default}.signal-live-dot{animation:auto ease 0s 1 normal none running none}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}}@media (max-width:767.98px){.signal-live-strip{flex-wrap:wrap;align-items:flex-start;border-radius:1rem;padding:.5rem .75rem;row-gap:.25rem}.signal-live-badge{margin-top:.1rem}.signal-live-item{white-space:normal;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;text-overflow:clip;overflow-wrap:anywhere;line-height:1.3}} 🔒 Fake developer job offer sent me a GitHub repo with a hidden folder-open task and credential-stealing Node.js backdoor (static analysis + hashes) | Malware / Trojaner / Viren – TSECURITY.DE
EILMELDUNGEN LIVE
Apple iOS & macOSCalif zeigt Untethered-iPhone-Jailbreak auf iOS 27.0.1 – Root bleibt nach Neustart(17.10.2026 um 20:46 Uhr)
•
Malware / Trojaner / VirenCandiru-Spyware über Anzeigen, KI-Sicherheitsdruck und wichtige Sicherheits-Updates(17.10.2026 um 20:49 Uhr)
•
AI & KI NachrichtenOpenAI enthüllt 4 Vorfälle, bei denen ein Modell ein fremdes Krypto-Wallet nutzte(17.10.2026 um 20:37 Uhr)
•
IT Security NachrichtenGoogle Introduces New Android Protections Against Mobile Scams(17.10.2026 um 20:31 Uhr)
•
IT Security NachrichtenIT Security News Hourly Summary 2026-10-17 21h : 3 posts(17.10.2026 um 21:00 Uhr)
•
IT Security NachrichtenSpyware vendors found a way to make targeted ads even worse(17.10.2026 um 21:01 Uhr)
•
AI & KI NachrichtenOpenAI: Graham Seamans wechselt von xAI und übernimmt Cybersecurity-Vertrieb(17.10.2026 um 14:18 Uhr)
•
AI & KI NachrichtenLinux Maintainers Can Now Submit AI-Generated Code Without Declaring It(17.10.2026 um 21:00 Uhr)
•
IT Security NachrichtenAce Combat 8: Wings of Theve Review (PC)(17.10.2026 um 20:35 Uhr)
•
IT Security DownloadsGitHub Release: microsoft/WSL v3.0.4 (17.10.2026)(17.10.2026 um 04:22 Uhr)
•
Apple iOS & macOSCalif zeigt Untethered-iPhone-Jailbreak auf iOS 27.0.1 – Root bleibt nach Neustart(17.10.2026 um 20:46 Uhr)
•
Malware / Trojaner / VirenCandiru-Spyware über Anzeigen, KI-Sicherheitsdruck und wichtige Sicherheits-Updates(17.10.2026 um 20:49 Uhr)
•
AI & KI NachrichtenOpenAI enthüllt 4 Vorfälle, bei denen ein Modell ein fremdes Krypto-Wallet nutzte(17.10.2026 um 20:37 Uhr)
•
IT Security NachrichtenGoogle Introduces New Android Protections Against Mobile Scams(17.10.2026 um 20:31 Uhr)
•
IT Security NachrichtenIT Security News Hourly Summary 2026-10-17 21h : 3 posts(17.10.2026 um 21:00 Uhr)
•
IT Security NachrichtenSpyware vendors found a way to make targeted ads even worse(17.10.2026 um 21:01 Uhr)
•
AI & KI NachrichtenOpenAI: Graham Seamans wechselt von xAI und übernimmt Cybersecurity-Vertrieb(17.10.2026 um 14:18 Uhr)
•
AI & KI NachrichtenLinux Maintainers Can Now Submit AI-Generated Code Without Declaring It(17.10.2026 um 21:00 Uhr)
•
IT Security NachrichtenAce Combat 8: Wings of Theve Review (PC)(17.10.2026 um 20:35 Uhr)
•
IT Security DownloadsGitHub Release: microsoft/WSL v3.0.4 (17.10.2026)(17.10.2026 um 04:22 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Fake developer job offer sent me a GitHub repo with a hidden folder-open task and credential-stealing Node.js backdoor (static analysis + hashes)

I was contacted about a full-stack developer job involving an existing card/casino web project. I received a GitHub collaborator invitation. The files were…

Malware / Trojaner / Viren Post malware and hostile servers for others to analyze 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (Post malware and hostile servers for others to analyze)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

I was contacted about a full-stack developer job involving an existing card/casino web project. I received a GitHub collaborator invitation. The files were statically analyzed **without executing the suspicious scripts during the analysis**. It contained an obfuscated loader disguised as an ESLint check. Sharing the findings so other developers... Weiterlesen: Fake developer job offer sent me a GitHub repo with a hidden folder-o…

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

32 sources
CVE-2026-109701 | PAYCOMET Plugin up to 5.45 on WordPress cross site scripting (EUVD-2026-103285)
31 more sources
VulDB Updates2 hours agoCVE-2026-109985 | wpdevteam xSpeed Cache Plugin up to 1.4.2 on WordPress content cross site scripting (EUVD-2026-103220) VulDB Updates2 hours agoCVE-2026-110268 | wpazleen Post Export Import with Media Plugin up to 1.17.2 on WordPress theme_slug path traversal (EUVD-2026-103219) VulDB Updates2 hours agoCVE-2026-111602 | LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress AJAX Endpoint steps__load_step customer[uuid] information disclosure (EUVD-2026-103218) VulDB Updates2 hours agoCVE-2026-109208 | ThimPress LearnPress Plugin up to 4.4.10 on WordPress Guest Checkout quantity/order_comments cross site scripting (EUVD-2026-103216) VulDB Updates2 hours agoCVE-2026-110653 | LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress verifyOTP toctou (EUVD-2026-103217) VulDB Updates2 hours agoCVE-2026-111601 | Hippooo Hippoo Mobile App Plugin up to 1.12.0 on WordPress token_id cross site scripting (EUVD-2026-103215)
+25

Mehr aus dieser Kategorie

Candiru-Spyware über Anzeigen, KI-Sicherheitsdruck und wichtige Sicherheits-Updates
17.10.2026
Zero-Click-Spyware via Online-Ads: Controlium-Mechanismus im Fokus
17.10.2026
Just when we thought targeted ads couldn't get any worse, these were found serving malware
17.10.2026
PS5-Jailbreak oder PSN? Sony erzwingt Update
17.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag