Fake job recruiters hide malware in developer coding challenges