Malicious code in cm-graphjs (npm)

The package cm-graphjs was found to contain malicious code...