A recruiter sent you a repo.
Check it isn't out to rob you.

Fake take-home assignments hide a loader that steals your keys, browser logins, and crypto wallets the moment you run npm install. Paste the repo below and read the verdict before you touch it. Static analysis only: nothing is cloned, run, or stored.