Malicious code in new-partial (npm)

The package new-partial was found to contain malicious code...