Malicious code in ash-profile (npm)

The package ash-profile was found to contain malicious code...