Malicious Repos

Sometimes the Repo Is the Attack: Malware Hidden Inside SVG Files

A fake freelancer sent me a real-looking Next.js project. Hidden inside its image files was a credential stealer set to run the moment I started the dev server. Here's the exact pattern — and how to check any repo before you run it.