Malicious code in oscar-7s6-project (npm)

The package oscar-7s6-project was found to contain malicious code...