Malicious code in jacolo (npm)

The package jacolo was found to contain malicious code...