Malicious code in new-struct (npm)

The package new-struct was found to contain malicious code...