Malicious code in crossfeed-web (npm)

The package crossfeed-web was found to contain malicious code...