Malicious code in @mylong.io/jackson-candidate-app (npm)

The package @mylong.io/jackson-candidate-app was found to contain malicious code...