Malicious code in @hishpr/minus-tempore-neque-vel (npm)

The package @hishpr/minus-tempore-neque-vel was found to contain malicious code...