Malicious code in root-app (npm)

The package root-app was found to contain malicious code...