Malicious code in spinoff (npm)

The package spinoff was found to contain malicious code...