Malicious code in bulma-command-transform-oscillation (npm)

The package bulma-command-transform-oscillation was found to contain malicious code...