Malicious code in key_value_model (npm)

The package keyvaluemodel was found to contain malicious code...