Malicious code in commodity-node (npm)

The package commodity-node was found to contain malicious code...