Malicious code in now-download (npm)

The package now-download was found to contain malicious code...