Malicious code in npm-include (npm)

The package npm-include was found to contain malicious code...