Malicious code in @hishprorg/alias-a-unde (npm)

The package @hishprorg/alias-a-unde was found to contain malicious code...