Malicious code in protect-api (npm)

The package protect-api was found to contain malicious code...