Malicious code in wfa_project (npm)

The package wfaproject was found to contain malicious code...