Malicious code in yaxis (npm)

The package yaxis was found to contain malicious code...