I am praying for your safe journey and for a good outcome from your appointment.
This is how they hack -
Malicious Code Found in Package Repositories
Attackers have increasingly targeted the software supply chain by populating package managers such as RubyGems and npm with malicious code.