Malicious code in face-engine (npm)

The package face-engine was found to contain malicious code...