Malicious code in mydouban (npm)

The package mydouban was found to contain malicious code...