Malicious code in gpt-terminal-cli (npm)

Source: amazon-inspector cefb2fc03ba2c4d843d8f15257be48318cde8e611cc3c80002f735af489a0f0a Package advertises itself as an AI chat CLI but its scripts.postinstall runs src/postinstall.js, which spawns src/implant/loader.js as a detached background daemon WORMGPTDAEMON=1, stdio ignored, windowsHide...