Malicious code in @scdb/urban-carnival (npm)

The package @scdb/urban-carnival was found to contain malicious code...