Malicious code in string-mapper (npm)

The package string-mapper was found to contain malicious code...