Malicious code in hardhat-contract-deploy (npm)

The package hardhat-contract-deploy was found to contain malicious code...