Malicious code in distogram (npm)

The package distogram was found to contain malicious code...