Malicious code in etch-in-stone (npm)

The package etch-in-stone was found to contain malicious code...