Malicious code in http-promises-async (npm)

The package http-promises-async was found to contain malicious code...