Malicious code in javapong (npm)

The package javapong was found to contain malicious code...