Malicious code in momen (npm)

The package momen was found to contain malicious code...