Malicious code in node-venues (npm)

The package node-venues was found to contain malicious code...