Malicious code in contracts-plugins (npm)

The package contracts-plugins was found to contain malicious code...