Malicious code in render-loop (npm)

The package render-loop was found to contain malicious code...