Malicious code in xlsx-to-json-lh (npm)

The package xlsx-to-json-lh was found to contain malicious code...