Malicious code in VDU-web (npm)

The package VDU-web was found to contain malicious code...