Malicious code in @igh/server-updater-ssh-l1 (npm)

The package contains malicious code...