Vue-CLI might contain malware from a dependency
github.com