Malicious code in clupda (npm)

The package clupda was found to contain malicious code...