Malicious code in @zzzgenesis00/web3-provider-engine (npm)

Source: amazon-inspector fae571005ccdcdc23e50fbee1eddc31d39355706b7945df3ccbb3096ecaf724b Package impersonates MetaMask's web3-provider-engine author field 'MetaMask', homepage pointing to github.com/MetaMask/web3-provider-engine while shipping a postinstall.js that runs automatically on npm...