I received a fake job offer. The NPM package was a full info-stealer | Hacker News Reader