Malicious code in no-one-left-behind (npm)

The package no-one-left-behind was found to contain malicious code...