Malicious code in cli-plugin-script (npm)

The package cli-plugin-script was found to contain malicious code...