A coordinated campaign targeting software developers with job-themed lures is using malicious repositories posing as legitimate Next.js projects and technical assessment materials, including recruiting coding tests.

The attacker’s goal is to achieve remote code execution (RCE) on developer machines, exfiltrate sensitive data, and introduce additional payloads on compromised systems.

Multiple execution triggers

Next.js is a popular JavaScript framework used for building web applications. It runs on top of React and uses Node.js for the backend.

The Microsoft Defender team says that the attacker created fake web app projects built with Next.js and disguised them as coding projects to share with developers during job interviews or technical assessments.

The researchers initially identified a repository hosted on the Bitbucket cloud-based Git-based code hosting and collaboration service. However, they discovered multiple repositories that shared code structure, loader logic, and naming patterns.

When the target clones the repository and opens it locally, following a standard workflow, they trigger malicious JavaScript that executes automatically when launching the app.

The script downloads additional malicious code (a JavaScript backdoor) from the attacker’s server and executes it directly in memory with the running Node.js process, allowing remote code execution on the machine.

To increase the infection rate, the attackers embedded multiple execution triggers within the malicious repositories, Microsoft explained. These are summarized as follows:

1. VS Code trigger – A .vscode/tasks.json file set with runOn: “folderOpen” executes a Node script as soon as the project folder is opened (and trusted).
2. Dev server trigger – When the developer runs npm run dev, a trojanized asset (e.g., a modified JS library) decodes a hidden URL, fetches a loader from a remote server, and executes it in memory.
3. Backend startup trigger – On server start, a backend module decodes a base64 endpoint from .env, sends process.env to the attacker, receives JavaScript in response, and executes it using new Function().

The infection process drops a JavaScript payload (Stage 1) that profiles the host and registers with a command-and-control (C2) endpoint, polling the server at fixed intervals.

The infection then upgrades to a tasking controller (Stage 2) that connects to a separate C2 server, checks for tasks, executes supplied JavaScript in memory, and tracks spawned processes. The payload also supports file enumeration, directory browsing, and staged file exfiltration.

Microsoft found that the campaign involved multiple repositories that shared naming conventions, loader structure, and staging infrastructure, indicating a coordinated effort rather than a one-off attack.

Aside from the technical analysis, the researchers did not provide any details about the attacker or the extent of the operation. 

The tech giant advises that developers should treat standard workflows as the high-risk attack surfaces they really are and take appropriate precautions.

The recommended mitigations include enforcing VS Code Workspace Trust/Restricted Mode, using Attack Surface Reduction (ASR) rules, and monitoring risky sign-ins with Entra ID Protection.

Secrets stored on developer endpoints should be minimized, and short-lived tokens with the least required privileges should be used where possible.

Modern IT infrastructure moves faster than manual workflows can handle.

In this new Tines guide, learn how your team can reduce hidden manual delays, improve reliability through automated response, and build and scale intelligent workflows on top of tools you already use.

Advertisement

Get the guide

TurboTax has been my go-to for self-filing taxes for years. It’s good enough for me—and literally millions of other users. TurboTax has quickly become a favorite among users for its easy-to-use self-filing services, along with easy access to assistance from tax professionals. TurboTax has free self-service for qualifying people, and TurboTax Live Assisted, where you file online with tax expert help if needed, and TurboTax Full Service, where a tax expert will do your taxes and review them with you before filing.

To help you figure out the often confusing process of filing taxes, I’ve written a guide on How to Pay Your Taxes Online, and The Best Tax Services. In both, I included TurboTax and similar services to help navigate between the options available for your specific tax needs. WIRED also has TurboTax coupons to save money while you begin the always-annoying task of filing your taxes this year. Canadian customers click here, these coupons are not for you.

Save 10% With TurboTax Service Codes and 2026 Early Filing Offers

Right now, you can get an extra 10% off Federal online tax filings with today’s TurboTax coupons. And best of all, these savings are in addition to the already-applied early-season discount: up to $40 off if you file by March 30.

You can use this TurboTax coupon for 10% off their most popular online tax products, like TurboTax Full Service. This price includes W-2 and 1040, with state returns for an additional fee. With ExpertFull Service, a tax professional will do your taxes for you, which costs a bit more than DIY-ing it, but can save you headaches and messes when it comes to what you owe. Things only get more expensive as tax season approaches, so file now to get the best price of the season.

If a TurboTax expert didn’t file for you last year, you’ll get even more in savings if you choose Expert Full Service. This service is now a simple flat fee of $150 for new customers, with Federal and State services included. Act soon, because those switching to TurboTax need to file by March 18 for this special discount.

If your taxes are a bit more straightforward, but you still have some questions, TurboTax Expert Assist (Live) offers the best of both worlds, where you file online yourself with tax expert help nearby if you end up needing it. With these TurboTax deals, you’ll get a 10% off TurboTax Live Assisted, with options starting at only $36 and (temporarily) capping out at $150 if you want to fully hand off your taxes. (Like the above service, this discount is for Federal tax products and filing early is the best way to ensure you’re getting the lowest price of the season).

*Price estimates are provided prior to a tax expert starting work on your taxes. Estimates are based on initial information you provide about your tax situation, including forms you upload to assist your expert in preparing your tax return and forms or schedules we think you’ll need to file based on what you tell us about your tax situation. Final price is determined at the time of print or electronic filing and may vary based on your actual tax situation, forms used to prepare your return, and forms or schedules included in your individual return. Prices are subject to change without notice and may impact your final price.

Give a 20% Off TurboTax Discount Code, Get up to $500

To save even more, get a TurboTax referral link, and when your friends use your link, they can get 20% off TurboTax federal products if they’re new customers of the service. As an added bonus, for each friend who files using your link, you’ll get a $25 gift card—you can earn up to a whopping $500 in gift cards (at this point, you’re basically getting another refund in gift cards). Here’s the nitty gritty: friends can receive 20% off the preparation and filing of federal tax return or business federal tax return through a TurboTax Online or TurboTax Live product, through October 31. You’ll get an email with the gift card or charitable donation within 45 days of your friend’s purchase. (Restrictions apply on TurboTax Free Edition, Intuit TurboTax Verified Pro, TurboTax State returns, TurboTax CD/Download products, and other add-on offerings.)

Save up to 20% on TurboTax Business Services

If you’re a small business owner, Expert Assist is probably the best service for you, with qualified tax experts at the ready to help you with any of those tricky filing questions. Right now, if you file your business tax returns with TurboTax, you’ll get 20% off one 2025 personal federal tax return. This type of service is best for those with S-corps and partnerships, and TurboTax will match you with a small business tax expert who knows your industry to maximize your deductions.

In addition to 20% off one personal tax filing offer for business customers, you can also get 10% off Business Expert Full Service and Expert Assist for small business owners. This discount applies to TurboTax federal products only (meaning no state products are included). These massive savings are in addition to early-season discounts.

New Customers Can File For Free in the App

If you’re unhappy with your old service, or just want to switch to TurboTax, you’ll be able to file your own taxes for free if you do it in the TurboTax app by February 28. If you have simple taxes, filing through your phone app is a great way to save big on usual filing fees. And best of all, this applies to Federal and State taxes, including all tax situations. You’ll just need to make sure you didn’t file with TurboTax last year, and this offer only applies to Do It Yourself, not TurboTax Experts, products. To save big and file for free as a new TurboTax customer, you’ll need to make sure you redeem this offer before midnight on February 28.

File for $0 With TurboTax Free Edition

As mentioned above, users can file for free with TurboTax free edition. Around 37% of taxpayers qualify. Simple Form 1040 returns only (no schedules except for Earned Income Tax Credit, Child Tax Credit, Student Loan Interest, and Schedule 1-A). While this may not be the blanket service for every type of tax filer, this works for those with simple finances, so do a little research and see if TurboTax free edition may be right for you to save big instead of spending big. TurboTax free edition includes $0 to file for Federal taxes and $0 for State taxes. This service is ideal for simple uploads, like W-2’s, where all you’ll need to do is import, upload, or snap a photo of your W–2 and TurboTax will autofill your info for you, saving you time and potential headaches.

There are other ways to save too, with TurboTax discount codes for military members. As a thank you, military members can file their own taxes and get both their federal and state taxes done for free returns only (no schedules, except for EITC, CTC, student loan interest, and Schedule 1-A).

Other Free TurboTax Tools for Tax Season

In addition to the differing plans for individuals’ needs, TurboTax also has other helpful resources for this tax season, including a Tax Refund Calculator, where you can estimate your 2026 return by answering questions about your life and income. Similarly, TurboTax also offers a Tax Bracket Calculator to help you estimate your 2025 taxable income. All you need to do is enter your tax year filing status and taxable income to calculate your estimated tax rate.

With TurboTax, you start for free and pay only when you file—plus you get 100% accurate calculations, guaranteed. That’s not all with the guarantees either. TurboTax ensures a “Maximum Refund Guarantee,” meaning if you get a larger refund or less taxes due from another tax preparation method, they’ll refund the applicable TurboTax federal and/or state purchase price paid. You can also get quick answers for any tax questions from AI-Powered Intuit Assist, and for the lazy filers among us (myself included), you can upload or snap a photo of your W-2 and the info will be autofilled for you.

Is There a Service Code for TurboTax?

TurboTax service codes are unique codes, usually issued by customer support for specific situations; these will require you to input the code into the “I have a service code” field before payment. These single-use codes are for any technical or billing issues you may have during the tax filing process.

Even if you don’t have a service code, don’t fret—there are still tons of ways to get TurboTax coupons, including a discount of 10% when you file before Tax Day (April 15). Plus, you can get 20% off TurboTax referral codes if you use a friend’s invite link, and if you send your link to a friend and they purchase an online TurboTax product, you’ll receive e-gift cards of up to $500 as a reward from TurboTax. Save on federal and business tax filings by following here for limited-time offers throughout the 2026 tax season.

American manufacturer of medical devices, UFP Technologies, has disclosed that a cybersecurity incident has compromised its IT systems and data.

UFP Technologies is a publicly traded medical engineering and manufacturing company that produces a broad range of devices and components used in surgery, wound care, implants, orthopedic applications, and healthcare wearables.

The company employs 4,300 people, has an annual revenue of $600 million, and a market cap of $1.86 billion, according to recent data.

In a filing submitted yesterday with the U.S. Securities and Exchange Commission (SEC), UFP Technologies disclosed that it detected suspicious activity on its IT systems on February 14.

The firm immediately deployed isolation and remediation measures and engaged external cybersecurity advisors to help with the investigation.

Preliminary results of the investigation indicate that the threat has been removed, but the hacker was able to steal data from compromised systems.

“Through the Company’s efforts, the Company believes that the third party responsible for this cybersecurity incident has been removed from the Company’s IT systems, and the Company’s ability to access information impacted by this incident has been restored in all material respects,” reads the SEC filing.

“The incident appears to have impacted many but not all of the Company’s IT systems and affected functions such as billing and label making for customer deliveries. Certain Company or Company-related data appear to have been stolen or destroyed.”

The data destruction note suggests a ransomware or wiper attack, although the nature of the malware remains unclear.

BleepingComputer has contacted UFP Technologies to ask about the attack and whether it involved data encryption/ransom payment demands, but a comment wasn’t immediately available.

At the time of publishing, no ransomware group has publicly claimed the attack on UFP Technologies.

UFP Technologies mentioned that, at this time, it has not determined whether personal information has been exfiltrated. If confirmed at a later time, notifications will be sent to impacted individuals as required by law.

The company stated that, despite the cybersecurity incident, its primary IT systems remain operational. Based on current evidence and assessments, UFP Technologies states it is unlikely that the incident will have a material impact on its operations or financials.

Modern IT infrastructure moves faster than manual workflows can handle.

In this new Tines guide, learn how your team can reduce hidden manual delays, improve reliability through automated response, and build and scale intelligent workflows on top of tools you already use.

Get the guide