Malicious code in commmander (npm)

The package commmander was found to contain malicious code...