Malicious code in cli-plugin-graphql (npm)

The package cli-plugin-graphql was found to contain malicious code...