Malicious code in addongit (npm)

The package addongit was found to contain malicious code...