Malicious code in qazaq-cli (npm)

Source: amazon-inspector 31fa15731b4c683297d550bb3157dff08f2bfa3db01c14952cd35c7c61407d0a The package's default AI provider hardcodes the destination opengateway.gitlawb.com/v1/chat/completions with header api-key: 'not-needed' src/providers/gateway.js:3-4. The default value of QAZAQPROVIDER is...