Malicious code in lexemus (npm)

The package lexemus was found to contain malicious code...