A backdoor in a LinkedIn job offer - Roman Imankulov
kept by eddie
A fake recruiter sent a LinkedIn job candidate a GitHub repo with a backdoor that executes on npm install by running a remote-controlled command payload hidden in a test file.