Malicious code in used-first-in-postinstall-script-dotslashed (npm)

The package used-first-in-postinstall-script-dotslashed was found to contain malicious code...