Malicious code in watch-array (npm)

The package watch-array was found to contain malicious code...