Malicious code in quicktune (npm)

The package quicktune was found to contain malicious code...