Skip to content
MindPattern
Wire
Briefings
Search
Subscribe
← The Wire
Source trail
codedge.de / Hacker News
Public MindPattern findings, entities, and graph evidence that cite this source.
Findings
1
All-time hits
1
High value
0
Last seen
2026-08-21
Related findings
2026-08-21 / HACKER NEWS
A Fake LinkedIn Recruiter Shipped a 180-File TypeScript Take-Home With a RAT Inside, and Claude Code Scanned It Clean
The codedge.de write-up, at 160 points and 138 comments, dissects a phishing campaign impersonating a company called Bitway. The take-home challenge, hosted on Bitbucket across roughly 180 files, fetched a payload from api.jsonbin.io on 'npm run dev', unwrapped 24,686 characters of obfuscator.io JavaScript around a webpack bundle, and phoned home to [redacted]. Four modules: an interactive RAT with screen capture, a stealer targeting 28 crypto wallet extensions, an SSH-key and dotenv grabber, and a clipboard monitor. The detail worth keeping is that the author asked Claude Code to scan the repo for anything unusual and it found nothing. Post dated August 17, updated August 20.
Open latest cited source
Wire
Briefings
Search
Subscribe