Python dev saved from disaster by intuition...and AI

A developer was lured by a fake recruiter to review a GitHub repo that contained an obfuscated backdoor which would execute during npm install via a package.json prepare hook; an AI agent detected the malicious network-exec behavior before the code was run, the repo was removed, and GitHub/npm are rolling out npm 12 changes to disable install-time scripts by default to reduce this supply-chain attack surface.