Malicious code in join-params (npm)

The package join-params was found to contain malicious code. --- Credit: OpenSSF source...