Malicious code in tvirtual (npm)

The package tvirtual was found to contain malicious code...