Malicious code in wminput (npm)

The package wminput was found to contain malicious code...