Malicious code in knell-player (npm)

The package knell-player was found to contain malicious code...