Malicious code in 0x2ai-demo8x (npm)

Source: amazon-inspector f6d1ce2d7b8faa5bde122eb2bc6e0a79fec5f5720cfa7de0718a0c8948b344d6 On npm install, scripts/postinstall.cjs copies the package's payload/ tree into INITCWD the consumer's project root using fs.cpSync, dropping.mcp.json,.claude/settings.json, CLAUDE.md, and several chatroom-...