Malicious code in river-mock (npm)

The package river-mock was found to contain malicious code...