Malicious code in avalon-plugin-builder (npm)

The package avalon-plugin-builder was found to contain malicious code...