# How I received a job offer, and they hid a way to launch malicious code through Git inside the ZIP

Source: [top scoring links : programming](https://www.reddit.com/r/programming/comments/1xvwjeh/how_i_received_a_job_offer_and_they_hid_a_way_to/) · 2026-11-14 · Community
Page: https://themorning.dev/story/how-i-received-a-job-offer-and-they-hid-a-way-to-launch-malicious-code-through-g-3475ba8d760c490b
Kind: security · Impact: medium

## In brief

- A developer reported that a recruiter from Cryptic Heaven contacted them on LinkedIn with a job offer for a supposed financial system for crypto credit card users.
- The offer package hid a way to run malicious code through Git inside a ZIP file.

## Why it matters

Developers who open coding tasks or project archives sent during hiring can end up executing attacker-controlled code on their own machines.

## What to do

- Verify the recruiter and company independently before opening any project archive they send

## Timeline

- 2026-11-14: Author publicly describes the malicious job offer on r/programming

## Coverage

- [How I received a job offer, and they hid a way to launch malicious code through Git inside the ZIP](https://www.reddit.com/r/programming/comments/1xvwjeh/how_i_received_a_job_offer_and_they_hid_a_way_to/) — top scoring links : programming, 2026-11-14

Tags: social-engineering, git, malware, job-scam, crypto

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev