Malicious code in cross-app (npm)

The package cross-app was found to contain malicious code...