Malicious code in fornax-callisto-query-async (npm)

The package fornax-callisto-query-async was found to contain malicious code...