Malicious code in wind-pipe-double-parse-static (npm)

The package wind-pipe-double-parse-static was found to contain malicious code...