Malicious code in vanilla-foxtrot-lima-gufaf (npm)

The package vanilla-foxtrot-lima-gufaf was found to contain malicious code...