Malicious code in measured-rails (npm)

The package measured-rails was found to contain malicious code...