Malicious code in title-from-url (npm)

The package title-from-url was found to contain malicious code...