Malicious code in ciftsp (npm)

The package ciftsp was found to contain malicious code...