Malicious code in additem (npm)

The package additem was found to contain malicious code...