Malicious code in physed (npm)

The package physed was found to contain malicious code...