Malicious code in new-empty-array (npm)

The package new-empty-array was found to contain malicious code...