Malicious code in cherry-watermelon-yankee-flaox (npm)

The package cherry-watermelon-yankee-flaox was found to contain malicious code...