Malicious code in cj-tests-2fa (npm)

The package cj-tests-2fa was found to contain malicious code...