Malicious code in node-fecth (npm)

The package node-fecth was found to contain malicious code...