Malicious code in affirm-assets (npm)

The package affirm-assets was found to contain malicious code...