Malicious code in hscday (npm)

The package hscday was found to contain malicious code...