According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to ...