Malicious code in zipconv (npm)

The package zipconv was found to contain malicious code...