Malicious code in xanadu-csrf-module-npm (npm)

The package xanadu-csrf-module-npm was found to contain malicious code...