Malicious code in hulasync (npm)

The package hulasync was found to contain malicious code...