The hackers direct candidates to find a bug in a password manager ... Python projects and GitHub, but the goal is to make the victim skip any security checks that may reveal the malicious code.