Malicious code in @refactco/refact-os (npm)

Source: amazon-inspector 072881a1fd9241acfcd601ad5387b0338a26ff4828763658c3840b43a3cedb1c Running this package's refact-os init CLI scaffolds AI-editor hook configurations .claude/settings.json, .cursor/hooks.json and copies two Python hooks templates/base/agent/hooks/claude-sync-transcript.py,...