Malicious code in blockheads (npm)

The package blockheads was found to contain malicious code...