Malicious code in touch-move (npm)

The package touch-move was found to contain malicious code...