Malicious code in run-serially (npm)

The package run-serially was found to contain malicious code...