Malicious code in midi-instrument (npm)

The package midi-instrument was found to contain malicious code...