Malicious code in khttpd (npm)

The package khttpd was found to contain malicious code...