Malicious code in fallen-merely-hay (npm)

The package fallen-merely-hay was found to contain malicious code...