Malicious code in dl-fb (npm)

The package dl-fb was found to contain malicious code...