Malicious code in echo-lemon-watermelon-cjktt (npm)

The package echo-lemon-watermelon-cjktt was found to contain malicious code...