Malicious code in docxead (npm)

The package docxead was found to contain malicious code...