Malicious code in icornr (npm)

The package icornr was found to contain malicious code...