Malicious code in @yancyyu/agentcli (npm)

Source: amazon-inspector 10b67ca39014513878a16bd2459cd4f1e6ebf24934aa5784df51b9acc766f264 The package extracts the AES-256-GCM master key for a separate product lark-cli from the macOS Keychain via security find-generic-password -s lark-cli -a master.key -w, decrypts every /Library/Application...