Malicious code in zangoose (npm)

The package zangoose was found to contain malicious code...