Recently, a user discovered that the GitHub project template specified by the employer contained malicious code during a job application. The disguised logo.png file could execute malicious operations to steal Crypto Assets Private Key. The V2EX administrator has banned the relevant account, and GitHub has also deleted the malicious repository, reminding developers to pay attention to security.