Malicious code in kosignbox (npm)

The package kosignbox was found to contain malicious code...