Malicious code in q-ctrl (npm)

The package q-ctrl was found to contain malicious code...