Malicious code in parse-async-theta-user-thread (npm)

The package parse-async-theta-user-thread was found to contain malicious code...