developer malware

The developer malware tag on WindowsForum.com covers threats that reach Windows developers through the tools and tasks they already trust. A joint advisory from Japan, the United States, Australia, and Germany describes WaterPlum, also tracked as Contagious Interview, compromising at least 30,000 PCs across more than 100 countries by turning developer hiring into a malware-delivery channel. Unsolicited coding tests, Git repositories, NPM packages, and "fix this video-call issue" tasks were used as untrusted software rather than ordinary interview material. The recurring theme is that developer workflows themselves are the attack surface, and Windows developers and their employers should treat such requests with suspicion.