Malicious code in fetch-cluster-carpo-await (npm)

The package fetch-cluster-carpo-await was found to contain malicious code...