Malicious code in drawon (npm)

The package drawon was found to contain malicious code...