Malicious code in format-text (npm)

The package format-text was found to contain malicious code...