Malicious code in aplay-audio (npm)

The package aplay-audio was found to contain malicious code...