Malicious code in quebec-turnip-4vqj (npm)

The package quebec-turnip-4vqj was found to contain malicious code...