Malicious code in desources (npm)

The package desources was found to contain malicious code...