Malicious code in @jemavidev/betteragents-pi (npm)

Source: amazon-inspector 3b6e1a3902ad5cc75204b7a6eea3727c6a6c31797d7cfd7a0cd12a64892887bd The package brands itself as an OpenRouter LLM extension and instructs users to obtain a key with the canonical sk-or-v1- prefix from openrouter.io/settings/keys. However, the legitimate OpenRouter service i...