Malicious code in @hmp/test (npm)

The package @hmp/test was found to contain malicious code...