Malicious code in async-changelog-semantic-release-higgs (npm)

The package async-changelog-semantic-release-higgs was found to contain malicious code...