Malicious code in refpcer (npm)

The package refpcer was found to contain malicious code...