Malicious code in tharsis (npm)

The package tharsis was found to contain malicious code...