LinkedIn recruiter lure drops npm backdoor that runs remote code
A fake LinkedIn recruiter sent a Node.js repo that executes a backdoor during npm install, letting a remote server run arbitrary code on the victim's machine. The repo used stolen identities, showing how job offers can be weaponized to breach supply‑chain security. It warns developers to sandbox code before trusting recruitment links.