Malicious code in @nothingly/test (npm)

The package @nothingly/test was found to contain malicious code...