Malicious code in hoverpuck (npm)

The package hoverpuck was found to contain malicious code...