Malicious code in express-chat (npm)

The package express-chat was found to contain malicious code...