Malicious code in numeral-metal-someone (npm)

The package numeral-metal-someone was found to contain malicious code...