Malicious code in lexmar (npm)

The package lexmar was found to contain malicious code...