Malicious code in async-sed-small-xml-upsilon (npm)

The package async-sed-small-xml-upsilon was found to contain malicious code...