Malicious code in meteor-envconfig-update-lightyear (npm)

The package meteor-envconfig-update-lightyear was found to contain malicious code...