Malicious code in vega-hermes-websockets-slides (npm)

The package vega-hermes-websockets-slides was found to contain malicious code...