Malicious code in vega-commitizen-morgan-hermes (npm)

The package vega-commitizen-morgan-hermes was found to contain malicious code...