Maintainer, the package is, which is downloaded around 2.7 million times a week, was infected with a malware loader.