Malicious code in this-trade-value (npm)

The package this-trade-value was found to contain malicious code...