Malicious code in avalon-cli-download (npm)

The package avalon-cli-download was found to contain malicious code...