Malicious code in salt-surface-indicate (npm)

The package salt-surface-indicate was found to contain malicious code...