Malicious code in nodejs-smtp (npm)

The package nodejs-smtp was found to contain malicious code...