Malicious code in wms-capabilities-parser (npm)

The package wms-capabilities-parser was found to contain malicious code...