Malicious code in nancangku (npm)

The package nancangku was found to contain malicious code...