Malicious code in spipad (npm)

The package spipad was found to contain malicious code...