Malicious code in hot-air-thread-minify-assert (npm)

The package hot-air-thread-minify-assert was found to contain malicious code...