Malicious code in npm-message (npm)

The package npm-message was found to contain malicious code...