Malicious code in vscode-js-profile-flame (npm)

The package vscode-js-profile-flame was found to contain malicious code...