NPM RUN HACK:ME - A SUPPLY CHAIN ATTACK JOURNEY

Summary from the TLDR InfoSec newsletter

This story is about a freelance developer tricked by a fake recruiter on LinkedIn for a Web3 project. After accepting simple coding tasks as part of the interview process, they launched a server that secretly gave hackers user-level access to their system. The supposed recruiter and CTO disappeared afterward.