Malicious code in hfwehew (npm)

The package hfwehew was found to contain malicious code...