Malicious code in cosmic-dev-server (npm)

The package cosmic-dev-server was found to contain malicious code...