Malicious code in mz-require (npm)

The package mz-require was found to contain malicious code...