Malicious code in json-language-server (npm)

The package json-language-server was found to contain malicious code...