Bitbucket is excessively used as a host for crypto miners, ransomware and Trojans are deployed in a single chain of attack. Malicious software was hosted on the Bitbucket version control repository web service. While legitimate hosting services like: Google Drive, GitHub and Dropbox are usually reported by users to quickly remove malicious files. However, the cybersecurity company has stated that a range of user profiles are regularly updated every hour to avoid disruption of forensic operations. More than 500,000 computers have been infected so far in this campaign and so far there are no signs of stopping malicious attacks.

https://www.zdnet.com/article/malware-stew-cooked-up-on-bitbucket-deployed-in-attacks-worldwide/