Malicious code in apps-script-oauth2 (npm)

The package apps-script-oauth2 was found to contain malicious code...