Malicious code in tsukuyomi (npm)

The package tsukuyomi was found to contain malicious code...