Malicious code in algol-duplex-winston-mui (npm)

The package algol-duplex-winston-mui was found to contain malicious code...