Malicious code in release-to-github (npm)

The package release-to-github was found to contain malicious code...