A trojanized Node.js repository disguised as a $600K freelance opportunity. Full breakdown: the fake profile, the malicious code, the C2 infrastructure, and how to protect yourself.