Malicious code in compton (npm)

The package compton was found to contain malicious code...