Malicious code in quebec-fig-watermelon-xlykd (npm)

The package quebec-fig-watermelon-xlykd was found to contain malicious code...