Malicious code in shusnow (npm)

The package shusnow was found to contain malicious code...