Malicious code in modplay (npm)

The package modplay was found to contain malicious code...