Malicious code in javascript-msx-sdk (npm)

The package javascript-msx-sdk was found to contain malicious code...