Fake coding tests conceal malware in SVG: developers are in the crosshairs again

Colleagues, I’d like to flag a cyber threat worth your attention.

I came across a campaign where attackers use fake job openings and coding challenges to trick developers into running a malicious repository.

The payload is hidden in SVG files with flags: data is split into Base64 fragments inside HTML comments and reassembled by a script when the project is launched.

The result is the OTTERCOOKIE chain: browser and crypto wallet theft, file collection, clipboard stealing, and remote access via Socket.IO.

Why this matters: one compromised developer can become the entry point for a supply-chain attack across the entire company.

Do you review test repositories and artifacts before running them? #cybersecurity #malware #supplychain #devsecops