NPM Supply Chain Attack: Fake Job Offer Drops Info-Stealer

Typosquatted npm package (pretie_x1) delivered via fake job offer drops AES-encrypted info-stealer for browser credentials, crypto wallets, and SSH keys.