Malicious code in savfin (npm)

The package savfin was found to contain malicious code...