Web developer on Upwork targeted by scam recruiter using malicious JS packages to steal crypto from wallet.