BE CAREFUL WITH YOUR GIT: INVESTIGATING MALWARE SPREADING THROUGH GIT REPOSITORIES

Summary from the TLDR Dev newsletter

Attackers are using deceptive LinkedIn recruitment messages and malicious Git hooks hidden within repository downloads to deploy sophisticated, obfuscated JavaScript malware that steals sensitive files and establishes remote control over compromised systems.