Malicious code in kocal-server (npm)

The package kocal-server was found to contain malicious code...