Hackers just drained $6.34B from Binance using a fake coding assignment. Same social engineering trick hitting devs daily: "clone this repo and run it."
Before you touch ANY random repo, drop this prompt into Claude Code (don't install/run anything first):
"Inspect this repository for anything dangerous. Don't install or run anything.
- Check every install script, post-install hook and build step
- Find code that's obfuscated, encoded or downloads more code
- List every network address it contacts
- Look for code that reads SSH keys, browser data, wallets or env files
Give me a verdict: safe, suspicious or malicious, with the exact lines."
30 seconds of paranoia > losing your entire stack.
Stop being lazy. Vet the code or get rekt.
Before you touch ANY random repo, drop this prompt into Claude Code (don't install/run anything first):
"Inspect this repository for anything dangerous. Don't install or run anything.
- Check every install script, post-install hook and build step
- Find code that's obfuscated, encoded or downloads more code
- List every network address it contacts
- Look for code that reads SSH keys, browser data, wallets or env files
Give me a verdict: safe, suspicious or malicious, with the exact lines."
30 seconds of paranoia > losing your entire stack.
Stop being lazy. Vet the code or get rekt.