Malicious code in jtr-hbs (npm)

The package jtr-hbs was found to contain malicious code...