North Korea Hackers Abuse Git Hooks to Deploy Cross-Platform Malware

North Korean-linked attackers are running the “Contagious Interview” campaign targeting developers through fake coding-assignment repositories that include malicious .githooks/pre-commit scripts. The lightweight hooks fingerprint the OS and fetch OS-specific payloads from a disposable Vercel domain (precommit.vercel.app), executing silently and returning success to avoid detection; the report provides multiple IOCs and remediation advice to inspect hook directories and run untrusted projects in isolated environments.