Malicious code in js-donkey (npm)

The package js-donkey was found to contain malicious code...