Malicious code in js-sha7 (npm)

The package js-sha7 was found to contain malicious code...