Malicious code in tl-creat (npm)

The package tl-creat was found to contain malicious code...