Malicious code in fig-victor-november-kweva (npm)

The package fig-victor-november-kweva was found to contain malicious code...