Malicious code in thiefapi (npm)

The package thiefapi was found to contain malicious code...