Malicious code in passaj (npm)

The package passaj was found to contain malicious code...