Malicious code in comander (npm)

The package comander was found to contain malicious code...