Malicious code in csv-cosmicray-mui-spica (npm)

The package csv-cosmicray-mui-spica was found to contain malicious code...