Malicious code in unlocks (npm)

The package unlocks was found to contain malicious code...