Malicious code in stepped (npm)

The package stepped was found to contain malicious code...