<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Oliver Zhang — Blog</title><description>Whatever I’m building or thinking about — engineering, design, tools, and the occasional detour.</description><link>https://oliverz.dev/</link><language>en</language><item><title>Two fake Upwork jobs, one infected Mac: my run-ins with North Korea&apos;s Contagious Interview</title><link>https://oliverz.dev/blog/upwork-contagious-interview/</link><guid isPermaLink="true">https://oliverz.dev/blog/upwork-contagious-interview/</guid><description>A test project with a poisoned npm package, and a fake meeting app installed with curl | bash. What happened both times, how I used Claude Code to find the malware, and the tool I built afterwards.</description><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate><category>security</category><category>upwork</category><category>malware</category><category>macos</category><category>contagious-interview</category></item></channel></rss>