The Upwork Invite Was the Attack

How a fake DeFi audit job tried to execute arbitrary code on my machine before I wrote a single line