Malicious code in json9 (npm)

The package json9 was found to contain malicious code...