Malicious code in thirdone (npm)

The package thirdone was found to contain malicious code...