Malicious code in chandl (npm)

The package chandl was found to contain malicious code...