Malicious code in hqsql (npm)

The package hqsql was found to contain malicious code...