Malicious code in ldash (npm)

The package ldash was found to contain malicious code...