Malicious code in leadconduit-velocify (npm)

The package leadconduit-velocify was found to contain malicious code...