bitbucket.org/welcome-air/welcome-nest
bitbucket.org/welcome-air/welcome-nest is a malicious repository
that one published source reports
in connection with Contagious Interview activity, which public reporting
attributes to North Korea (DPRK).
It is cited here from mighty840 (DEV Community).
The report is dated 2026-04-16.
malicious repository Contagious Interview RESEARCHER POST Taken down
Source
-
The post of 16 April 2026 describes a LinkedIn approach from a contact presenting as the chief executive of a Web3 start-up, who shared the Bitbucket repository above as a demo project to run. The author traced the payload's exfiltration to the address above on ports 8085 to 8087 and attributes the approach to the Contagious Interview campaign. The start-up whose name was used is not carried, and neither is the contact's name, which the post gives without an account.
dev.to/mighty840/i-was-targeted-by-a-dprk-linked-supply-chain-attack-via-linkedin-heres-exactly-how-it-worked-21kp — mighty840 (DEV Community)
Find this indicator in the index, or see every malicious repository this site holds under Malicious repositories in the browse listing.