I had a similar experience and I wonder why bitbucket is alway the choice to host this malware. I files some requests to take that down, but never got a response.