Malicious code in asynd (npm)

The package asynd was found to contain malicious code...