Malicious code in threw2 (npm)

The package threw2 was found to contain malicious code...