Malicious code in tinyspot (npm)

The package tinyspot was found to contain malicious code...