Malicious code in mergequeue-eval-mergequeue (npm)

The package mergequeue-eval-mergequeue was found to contain malicious code...