Malicious code in sh-utils (npm)

The package sh-utils was found to contain malicious code...