Malicious code in add-users (npm)

The package add-users was found to contain malicious code...