Malicious code in allcash (npm)

The package allcash was found to contain malicious code...