Malicious code in creats (npm)

The package creats was found to contain malicious code...