Malicious code in ghostdrop (npm)

The package ghostdrop was found to contain malicious code...