Malicious code in pie-docs (npm)

This package steals IP address and sent it to C&C server in preinstall hook...