Malicious code in cm-api (npm)

The package cm-api was found to contain malicious code...