Malicious code in colour-string (npm)

The package colour-string was found to contain malicious code...