Malicious code in simple-js-sha3-256 (npm)

The package simple-js-sha3-256 was found to contain malicious code...