Attackers Are Hunting High-Impact Node.js Maintainers with Social Engineering (socket.dev)

Saw the axios post-mortem thread on X and it kept me wondering how the prompt to install an "updated SDK" appeared on the screen - does Zoom provide programmable interactions?

I guess at the end of the day it's just a lookalike phishing link?