Malicious code in google-wormhole-xerxes-spinner (npm)

The package google-wormhole-xerxes-spinner was found to contain malicious code...