Malicious code in cicada-render (npm)

The package cicada-render was found to contain malicious code...