Malicious code in dystatic (npm)

The package dystatic was found to contain malicious code...