Malicious code in cherry-ch2-project (npm)

The package cherry-ch2-project was found to contain malicious code...