Malicious code in vfer4 (npm)

The package vfer4 was found to contain malicious code...