The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
🚨 Heads up to fellow developers: watch out for “ZedAI Digital.” 🚨
I recently got what looked like a legit freelance offer — a full-stack blockchain / DeFi role, friendly recruiter, talk of milestones and an $8,000 budget. All very normal.
Then came the “quick skills test”: clone our project, run it, and investigate a browser console error.
That’s the trap. 🪤
The repo they send has a known malicious npm package baked into its dependencies (tailwind-motionkit). The moment you run npm install, its install script runs. That’s the actual attack. It’s designed to steal credentials, browser data, and crypto wallet info. The “job” is just the bait to get you to run it.
I caught it before installing, so no harm done. Deleted everything and reported the package + repo.
Red flags to remember:
A “job” that quickly asks you to clone their repo and run npm install to “fix a bug” or “reproduce an error”
Unusually smooth offer + budget before any real interview
Pressure to run their code on your main machine
Names/handles seen in this one: ZedAI Digital, “Silverio,” “Shaneas B.,” “Veljko Spasojevic.” (Claims to be HQ’d in Ashburn, VA.)
Protect yourself:
✅ Never npm install an unknown repo on your main machine
✅ Read the package.json first. Check every dependency.
✅ Run untrusted code in a sandbox/VM only
✅ Check packages on socket.dev before installing
Stay safe out there. Share this so it reaches someone before they hit “install.” 🙏
#freelance #webdev #blockchain #cybersecurity #scamalert
If you come across such stuff. Use:
https://github.com/g-h-0-S-t/fake-job-email-response-guide
To report across 17 agencies globally (quickly).
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Trending
Claude
Claude has entered the design space. How are you using Claude Design?
Contra University
Learn from expert creatives how to earn more using next-gen AI tools.
creativeaiflow
Creative AI workflows are evolving. What tools do you use, and what are their strengths and weaknesses?
freelancerlife
Freelancer life is wins, pivots, and everything in between. What’s yours right now?
Related posts
How I turned a broken AI layout into a polished project utilizing Envato elements!
For this challenge, I wanted to test how far AI could take my project layout. I used an AI tool to generate the initial website structure, but the alignment and grid elements completely broke down.
To fix this, I manually restructured the entire layout, cleaned up the design harmony, and brought in high-quality assets from Envato to elevate the overall visual identity. Envato totally saved the day and turned a broken framework into a clean, modern, and production-ready interface!
Excellent execution! The attention to detail really stands out. Wishing you the best of luck in the competition! 🙌
😍 This the best I have done in health industry - A SaaS platform: https://treatmentnotes.com/
🚀 Built an AI-powered behavioral health documentation platform designed for real clinical workflows. The system supports AI generated notes from live conversations, uploaded transcripts, and custom knowledge-base logic tailored to mental health and addiction treatment. It was designed for secure, scalable healthcare use with HIPAA ready architecture and EMR integration support.
💯 Complete Tech Stack:
AI Summarization, Clinical Nuance Detection, FastAPI, Vite, React, AWS Bedrock, Anthropic Claude, PostgreSQL, pgvector, Vector Database, Retrieval-Augmented Generation (RAG), AI Agent Architecture, HIPAA Compliant Cloud, Speech-to-Text API, LLM Fine-tuning, Healthcare Interoperability, HL7/FHIR Integration, Serverless Backend, Semantic Search, Private LLM Deployment, Encryption at Rest, Python Backend Development.
🧠 What do you say Contra Community?
I spent a week auditing 10 digital agency websites
the uncomfortable truth... they all said the exact same thing
"We're a full-service agency delivering results-driven solutions for your success."
Not 1 number. Not 1 real client result. Not 1 specific service explained clearly
Visitors don't read that. They leave
What actually works on an agency or service website-
— Real results with real numbers upfront
— Specific services, not vague categories
— Exactly who you work with
— What the client experience actually looks like
We built Everther Studio around this from day 1. No buzzwords. No filler. Just proof
https://www.instagram.com/p/DbAqOxNiTHr
Full breakdown in the carousel 👆