Malicious code in powerquery-parser (npm)

The package powerquery-parser was found to contain malicious code...