I Inspected My Take-Home Interview Project. It Was a Whole Operation

A developer received a suspicious job offer for a Python role with unusually high pay ($10,000-$15,000/month) from a recruiter who contacted them on LinkedIn. After receiving a take-home assignment, the developer discovered malicious Git hooks pre-configured in the project repository designed to execute remote code from an external server when commits are made, revealing this as a sophisticated supply chain attack rather than a legitimate job opportunity.