Malicious code in mobipluto (npm)

The package mobipluto was found to contain malicious code...