Malicious code in sobojohn (npm)

The package sobojohn was found to contain malicious code...