Malicious code in metalsmith-janus-javascript-transport (npm)

The package metalsmith-janus-javascript-transport was found to contain malicious code...