“Fake interviews” scam spreads malware through 35 NPM packages, targeting developers with malicious code disguised as legitimate software updates.