Malicious code in demohope (npm)

The package demohope was found to contain malicious code...