Malicious code in callback-cache-1 (npm)

The package callback-cache-1 was found to contain malicious code...