Malicious code in jscarton (npm)

The package jscarton was found to contain malicious code...