Malicious code in cliptwo (npm)

The package cliptwo was found to contain malicious code...