Malicious code in cli-plugin-migrate (npm)

The package cli-plugin-migrate was found to contain malicious code...