Malicious code in eleventy-xerxes-ora-global (npm)

The package eleventy-xerxes-ora-global was found to contain malicious code...