Malicious code in alloydemo (npm)

The package alloydemo was found to contain malicious code...