msobkyy
TTCTheo's Typesafe Cult
•Created by msobkyy on 2/15/2025 in #questions
Trojan Virus in React Project!!
Recently, someone invited me to work on a React project. The job seemed suspicious, and I had doubts. Usually, if it's a scam, they send files containing malicious code. However, in this case, they asked for my GitHub username to send me an invite to a repository. Everything seemed legit, but I still felt something was off.
I downloaded the code, which contained two folders—one for the frontend (React) and one for the backend (Node.js). After running the project, I noticed that Python was installed in the background, along with Python scripts running and requesting permissions.
I installed Malwarebytes, and it detected a TROJAN. I still have no idea how the Node.js project installed the malware.
I still have the code—can someone help me investigate this?
12 replies