Take-Home Interview Project Hid a Malicious Git Hook

AI summary

A developer inspecting a take-home assignment discovered a pre-commit Git hook that would detect the host operating system and fetch a remote script for execution. The payloads were hosted on a raw IP address and appeared designed to run silently when Git operations were performed, indicating a malware delivery attempt disguised as a hiring exercise.