Malicious code in hello-world-lupin (npm)

The package hello-world-lupin was found to contain malicious code...