Malicious code in new-range (npm)

The package new-range was found to contain malicious code...