Malicious code in tkbnp4 (npm)

The package tkbnp4 was found to contain malicious code...