A developer thwarted a suspected nation-state attack that used a fake job interview to deliver a malicious TypeScript patch. The payload attempted to install the PinpinRAT backdoor, but the attack ultimately failed. The incident prompted a detailed public analysis of the attack vector, the malware, and its indicators of compromise.