AI-generated malicious npm package that steals developers' files by scanning local directories and uploading data to a GitHub repository.