Malicious code in goplay (npm)

The package goplay was found to contain malicious code...