Malicious code in cp-date (npm)

The package cp-date was found to contain malicious code...