Malicious code in array-join-seperators (npm)

The package array-join-seperators was found to contain malicious code...