Malicious code in pt-serif (npm)

The package pt-serif was found to contain malicious code...