A fake recruiter induced a Binance engineer to run a take-home assignment whose setup code replaced `pyenv` under `/opt/homebrew`, a pattern SafeDep links to the DPRK-associated Contagious Interview campaign. SafeDep's benign reconstruction showed that package-reputation checks alone cannot detect payloads embedded directly in an assignment's own scripts. Its sandbox blocked tool replacement, shell-startup modification, SSH and environment-secret access, and `curl` execution, but default audit-mode networking still allowed raw outbound connections. Enforced proxy-only network controls closed that gap, although editor tasks, Git hooks, Homebrew commands, and unsandboxed direct execution remain outside the demonstrated protection.