Malicious code in newfusion (npm)

The package newfusion was found to contain malicious code...