Malicious code in tcl-expect (npm)

The package tcl-expect was found to contain malicious code...