Malicious code in tf_client (npm)

The package tfclient was found to contain malicious code...