Malicious code in final-html (npm)

The package final-html was found to contain malicious code...