Malicious code in npm-import (npm)

The package npm-import was found to contain malicious code...