Malicious code in testmv (npm)

The package testmv was found to contain malicious code...