Malicious code in lapsing (npm)

The package lapsing was found to contain malicious code...