Malicious code in activity-reader (npm)

The package activity-reader was found to contain malicious code...