Or if the Easter egg was obfuscated and looked potentially malicious[1].

1: https://github.com/npm/cli/issues/4091