Malicious code in node-ftp (npm)

The package node-ftp was found to contain malicious code...