Malicious code in xylophone-supernova-rjl2 (npm)

The package xylophone-supernova-rjl2 was found to contain malicious code...