Malicious code in switcharoo-plugin-metrics (npm)

The package switcharoo-plugin-metrics was found to contain malicious code...