Malicious code in placeholderx (npm)

The package placeholderx was found to contain malicious code...