Malicious code in dotenv-lib (npm)

The package dotenv-lib was found to contain malicious code...