Malicious code in epress (npm)

The package epress was found to contain malicious code...