Malicious code in shellr (npm)

The package shellr was found to contain malicious code...