Malicious code in ejs-client (npm)

The package ejs-client was found to contain malicious code...