Malicious code in xpc.js (npm)

The package xpc.js was found to contain malicious code...