They Sent Me a Malicious GitHub Repo
Disguised as a Job Interview

How targeted developer attacks hide in plain sight.