Malicious code in avalon-cli-create (npm)

The package avalon-cli-create was found to contain malicious code...