Malicious code in char-scale-string-object-hot (npm)

The package char-scale-string-object-hot was found to contain malicious code...