Malicious code in express-websockets-sedna-mongodb (npm)

The package express-websockets-sedna-mongodb was found to contain malicious code...