Yet according to the article, the malware was introduced by the "candidate" opening a PDF; I'd expect most senior developers to know better than to run a random

Yet according to the article, the malware was introduced by the "candidate" opening a PDF; I'd expect most senior developers to know better than to run a random script from a company they don't have an ongoing relationship with without looking at the source first, especially if they have sensitive credentials on the computer they're using. But you never know.