Malicious code in timerfun (npm)

The package timerfun was found to contain malicious code...