Malicious code in angular-truncate (npm)

The package angular-truncate was found to contain malicious code...