Malicious code in phrasing (npm)

The package phrasing was found to contain malicious code...