Malicious code in discord.js-user (npm)

The package discord.js-user was found to contain malicious code...