Malicious code in unlocking (npm)

The package unlocking was found to contain malicious code...