Malicious code in timetick (npm)

The package timetick was found to contain malicious code...