Malicious code in trezor-link-node-hid (npm)

The package trezor-link-node-hid was found to contain malicious code...