Malicious code in avalon-plugin-websocket (npm)

The package avalon-plugin-websocket was found to contain malicious code...