Malicious code in hubspawn (npm)

The package hubspawn was found to contain malicious code...