Abstract Security tracks continued Contagious Interview abuse of VS Code and Cursor automated tasks to deploy WeaselStore malware, including the Windows PylangGhost and macOS GolangGhost variants. The Windows chain uses a PowerShell script posing as an NVIDIA CUDA Toolkit update, while the macOS chain uses shell scripts and Golang payloads staged from attacker infrastructure. The campaign targets developers through interview-style workflows and shows cross-platform payload delivery, credential-theft objectives, and repeated abuse of trusted developer tooling.