Malicious code in nebula-js (npm)

The package nebula-js was found to contain malicious code...