Malicious code in xwenkend (npm)

The package xwenkend was found to contain malicious code...