Malicious code in echo-ydc-project (npm)

The package echo-ydc-project was found to contain malicious code...