Malicious code in mongodb-nightmare-private-passport (npm)

The package mongodb-nightmare-private-passport was found to contain malicious code...