Stay out of trouble, disable postinstall
npm install @ma.vu/virus
You should disable
npm config set ignore-scripts true
I found about 'postinstall' script from this youtube video
Blog post about this can be found here
Good Luck,
PS: Elm has no problems like this.