Fake LinkedIn recruiters hide a backdoor that fires on npm install

A recruiter messages a software developer on LinkedIn about a lead-engineer job. She sends a GitHub project and asks him to look at a bug.

Fake reward surveys use a $5 to $10 fee to steal card data

A fake free-iPhone survey doesn't need your password. It waits until the end and asks for a $5 to $10 shipping fee.