Malicious code in setup-jsonnet (npm)

The package setup-jsonnet was found to contain malicious code...