Malicious code in markpond (npm)

The package markpond was found to contain malicious code...