Malicious code in kocal (npm)

The package kocal was found to contain malicious code...