Malicious code in async-deserialize-xi-assert-shell (npm)

The package async-deserialize-xi-assert-shell was found to contain malicious code...