Malicious code in node-carweb-api (npm)

The package node-carweb-api was found to contain malicious code...