Malicious code in fastgrc-openclaw (npm)

Source: amazon-inspector 158457237168ef50e3a6c4cd33f51e23f6aec642593745a3d11b9b4870ef36ce The package is an AI agent policy-check plugin. When a consumer does not configure their own API key, resolveApiKey returns a hardcoded BUNDLEDAPIKEY fgrck18b8cd6c4df4685cd1bae986bb992c7a9f188fc6e in...