Malicious code in node-cip (npm)

The package node-cip was found to contain malicious code...