it installed npm which ran a js script. You have racism level Rust hate.
Rust-Based Malware Hits 1.4% of Arch User Repository
The data stealing code compromised over 1,500 packages in the Arch Linux User Repository, making use of Rust, Systemd, NodeJS, & Bun.