Malicious code in jupiter-javascript-corvus-dendrochronology (npm)

The package jupiter-javascript-corvus-dendrochronology was found to contain malicious code...