Malicious code in stripe-cli-init-plugin (npm)

Source: amazon-inspector 05bd1dbc9732ef80aca27acad964c041b74e646e26cf4947ad34807c41d2c4a8 Package name 'stripe-cli-init-plugin' impersonates the Stripe CLI ecosystem and ships a bin script bin/run.js that, when invoked via npx stripe-cli-init-plugin or as the installed CLI, POSTs the installer's...