Malicious code in jgltut (npm)

The package jgltut was found to contain malicious code...