Malicious code in commenci (npm)

The package commenci was found to contain malicious code...