Malicious code in codeval (npm)

The package codeval was found to contain malicious code...