Malicious code in magic-script (npm)

The package magic-script was found to contain malicious code...