Malicious code in qdigest (npm)

The package qdigest was found to contain malicious code...