Malicious code in mocha-sedna-server-convict (npm)

The package mocha-sedna-server-convict was found to contain malicious code...