Malicious code in tuhaoche (npm)

The package tuhaoche was found to contain malicious code...