{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreia2vjpfo63g2bjagtga3i7ldpxzh2f7ijnzaqvz3h5s3ziclpcr3y",
    "uri": "at://did:plc:ghkvexthfanuyq7fb5veq6tw/app.bsky.feed.post/3mfrbgpj6mbt2"
  },
  "coverImage": {
    "$type": "blob",
    "ref": {
      "$link": "bafkreiflxgrqwxgfxuslb7qlb4y2epkct24ac4q7mibzcsiv6gz4fv7snm"
    },
    "mimeType": "image/jpeg",
    "size": 319276
  },
  "path": "/2026/02/fake-nextjs-repos-target-developers.html",
  "publishedAt": "2026-02-26T10:35:00.000Z",
  "site": "https://thehackernews.com",
  "textContent": "A \"coordinated developer-targeting campaign\" is using malicious repositories disguised as legitimate Next.js projects and technical assessments to trick victims into executing them and establish persistent access to compromised machines.\n\"The activity aligns with a broader cluster of threats that use job-themed lures to blend into routine developer workflows and increase the likelihood of code",
  "title": "Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware"
}