Malicious code in bind-key (npm)

The package bind-key was found to contain malicious code...