Malicious code in comma-list (npm)

The package comma-list was found to contain malicious code...