Malicious code in findall (npm)

The package findall was found to contain malicious code...