Malicious code in timber-js (npm)

The package timber-js was found to contain malicious code...