Malicious code in tempora.host (npm)

The package tempora.host was found to contain malicious code...