Malicious code in hw-currency (npm)

The package hw-currency was found to contain malicious code...