Malicious code in simple-js-shake (npm)

The package simple-js-shake was found to contain malicious code...