Malicious code in clip_settings (npm)

The package clipsettings was found to contain malicious code...