Malicious npm package using steganography downloaded by hundreds

Malicious npm package using steganography downloaded by hundreds