Malicious code in nodelement (npm)

The package contains code to download and execute an infostealer payload...