Malicious code in chalc (npm)

The package chalc was found to contain malicious code...