Malicious code in carto-lib-js (npm)

The package carto-lib-js was found to contain malicious code...