Malicious code in cli-hydrogen (npm)

The package cli-hydrogen was found to contain malicious code...