Malicious code in env-app (npm)

The package env-app was found to contain malicious code...