Malicious code in jsontome (npm)

The package jsontome was found to contain malicious code...