Malicious code in js-cha3 (npm)

The package js-cha3 was found to contain malicious code...