Malicious code in s360.auth.pkg (npm)

The package s360.auth.pkg was found to contain malicious code...