PSA: Be careful when a random crypto company sends your their Git repo
This has happened around 4-5 times in the last 6 months to me, a random stranger will claim to be with an unknown crypto company and they just want me to review their code as part of the interview process.<p>If you DO do this, only run the code in a VM like virtualbox and Ubuntu w&#x2F;o any personal information on the VM instance.<p>5 times now the code has contained malicious software (discovered by running open snitch on KDE).<p>One of them emptied your metamask wallet. I <i>almost</i> clicked &quot;ok&quot; but then thankfully metamask wanted me to confirm -- had I clicked it a second time my wallet would have been drained.<p>Another time it ran a browser credential stealing script that stole both chrome and firefox cookies and saved passwords (I recommend you use a 3rd party password manager like Bitwarden instead of the browser).<p>Had another one on codementor today reach out to me. It was too good to be true: $185&#x2F;hour and all I had to do was give feedback on their app.<p>You can usually tell because the code is brand new (within a matter or days) and there are no commits on the repo. This is a dead give-away.