How a Clean Next.js Repo Ran Malware on Every npm run dev

A codebase I got through Fiverr looked like an ordinary Next.js invoice app. It wasn't. Two...