Malicious code in stocatto (npm)

The package stocatto was found to contain malicious code...