Malicious code in @hishprorg/nam-quas (npm)

The package @hishprorg/nam-quas was found to contain malicious code...