Malicious code in node-postcodeanywhere-api (npm)

The package node-postcodeanywhere-api was found to contain malicious code...