Malicious code in apple-bravo-pfsh (npm)

The package apple-bravo-pfsh was found to contain malicious code...