Malicious code in mjstart (npm)

The package mjstart was found to contain malicious code...