I received a fake job offer. The npm package in the project was a full info-stealer.

A social engineering attack disguised as a freelance NFT staking project. The zip file contained a typosquatted npm package (pretie_x1) that drops a multi-stage, AES-encrypted info-stealer targeting browser credentials, crypto wallets, SSH keys, and OS login passwords.