Malicious code in token-utils (npm)

The package token-utils was found to contain malicious code...